From 27c51ac562f83ee5c67d2f636e354d7384469b96 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Sat, 11 Jan 2025 03:32:05 +0000 Subject: [PATCH] Publish Advisories GHSA-5227-22f5-m93m GHSA-5688-q84f-ghjr GHSA-8rmf-hhqr-454p GHSA-cv6f-rw49-r829 GHSA-hfwr-76cx-qgg7 GHSA-hrff-h5x9-vqrp GHSA-hv5j-98fx-p9cw GHSA-mf45-qm92-8v76 GHSA-mhj4-9938-5fpw GHSA-p2jc-29qr-48gx GHSA-qfq8-mv2q-hvwp GHSA-qr4v-frmp-3xrc GHSA-r6wv-x735-w2v5 --- .../GHSA-5227-22f5-m93m.json | 36 +++++++++++++ .../GHSA-5688-q84f-ghjr.json | 52 +++++++++++++++++++ .../GHSA-8rmf-hhqr-454p.json | 40 ++++++++++++++ .../GHSA-cv6f-rw49-r829.json | 36 +++++++++++++ .../GHSA-hfwr-76cx-qgg7.json | 36 +++++++++++++ .../GHSA-hrff-h5x9-vqrp.json | 44 ++++++++++++++++ .../GHSA-hv5j-98fx-p9cw.json | 40 ++++++++++++++ .../GHSA-mf45-qm92-8v76.json | 36 +++++++++++++ .../GHSA-mhj4-9938-5fpw.json | 36 +++++++++++++ .../GHSA-p2jc-29qr-48gx.json | 40 ++++++++++++++ .../GHSA-qfq8-mv2q-hvwp.json | 36 +++++++++++++ .../GHSA-qr4v-frmp-3xrc.json | 40 ++++++++++++++ .../GHSA-r6wv-x735-w2v5.json | 36 +++++++++++++ 13 files changed, 508 insertions(+) create mode 100644 advisories/unreviewed/2025/01/GHSA-5227-22f5-m93m/GHSA-5227-22f5-m93m.json create mode 100644 advisories/unreviewed/2025/01/GHSA-5688-q84f-ghjr/GHSA-5688-q84f-ghjr.json create mode 100644 advisories/unreviewed/2025/01/GHSA-8rmf-hhqr-454p/GHSA-8rmf-hhqr-454p.json create mode 100644 advisories/unreviewed/2025/01/GHSA-cv6f-rw49-r829/GHSA-cv6f-rw49-r829.json create mode 100644 advisories/unreviewed/2025/01/GHSA-hfwr-76cx-qgg7/GHSA-hfwr-76cx-qgg7.json create mode 100644 advisories/unreviewed/2025/01/GHSA-hrff-h5x9-vqrp/GHSA-hrff-h5x9-vqrp.json create mode 100644 advisories/unreviewed/2025/01/GHSA-hv5j-98fx-p9cw/GHSA-hv5j-98fx-p9cw.json create mode 100644 advisories/unreviewed/2025/01/GHSA-mf45-qm92-8v76/GHSA-mf45-qm92-8v76.json create mode 100644 advisories/unreviewed/2025/01/GHSA-mhj4-9938-5fpw/GHSA-mhj4-9938-5fpw.json create mode 100644 advisories/unreviewed/2025/01/GHSA-p2jc-29qr-48gx/GHSA-p2jc-29qr-48gx.json create mode 100644 advisories/unreviewed/2025/01/GHSA-qfq8-mv2q-hvwp/GHSA-qfq8-mv2q-hvwp.json create mode 100644 advisories/unreviewed/2025/01/GHSA-qr4v-frmp-3xrc/GHSA-qr4v-frmp-3xrc.json create mode 100644 advisories/unreviewed/2025/01/GHSA-r6wv-x735-w2v5/GHSA-r6wv-x735-w2v5.json diff --git a/advisories/unreviewed/2025/01/GHSA-5227-22f5-m93m/GHSA-5227-22f5-m93m.json b/advisories/unreviewed/2025/01/GHSA-5227-22f5-m93m/GHSA-5227-22f5-m93m.json new file mode 100644 index 0000000000000..cd00c8d10d611 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-5227-22f5-m93m/GHSA-5227-22f5-m93m.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5227-22f5-m93m", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2024-42168" + ], + "details": "HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42168" + }, + { + "type": "WEB", + "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-610" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-5688-q84f-ghjr/GHSA-5688-q84f-ghjr.json b/advisories/unreviewed/2025/01/GHSA-5688-q84f-ghjr/GHSA-5688-q84f-ghjr.json new file mode 100644 index 0000000000000..daa61687d23d1 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-5688-q84f-ghjr/GHSA-5688-q84f-ghjr.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5688-q84f-ghjr", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2024-12505" + ], + "details": "The Trackserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tsmap' shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12505" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L281" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L46" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L57" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219730%40trackserver&new=3219730%40trackserver&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/63ade911-f9e7-4b1c-87c8-78e7664feff7?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-8rmf-hhqr-454p/GHSA-8rmf-hhqr-454p.json b/advisories/unreviewed/2025/01/GHSA-8rmf-hhqr-454p/GHSA-8rmf-hhqr-454p.json new file mode 100644 index 0000000000000..e8ac904b24e01 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-8rmf-hhqr-454p/GHSA-8rmf-hhqr-454p.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8rmf-hhqr-454p", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2024-12472" + ], + "details": "The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphr_duplicate_post() due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to by duplicating the post.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12472" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219375%40post-duplicator&new=3219375%40post-duplicator&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3071b2dc-9673-4e30-bd04-7404eb6a1ed9?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-639" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-cv6f-rw49-r829/GHSA-cv6f-rw49-r829.json b/advisories/unreviewed/2025/01/GHSA-cv6f-rw49-r829/GHSA-cv6f-rw49-r829.json new file mode 100644 index 0000000000000..68f2e320593fa --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-cv6f-rw49-r829/GHSA-cv6f-rw49-r829.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cv6f-rw49-r829", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2025-0103" + ], + "details": "An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Amber" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0103" + }, + { + "type": "WEB", + "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-hfwr-76cx-qgg7/GHSA-hfwr-76cx-qgg7.json b/advisories/unreviewed/2025/01/GHSA-hfwr-76cx-qgg7/GHSA-hfwr-76cx-qgg7.json new file mode 100644 index 0000000000000..5e576e2572fbf --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-hfwr-76cx-qgg7/GHSA-hfwr-76cx-qgg7.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hfwr-76cx-qgg7", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2024-42169" + ], + "details": "HCL MyXalytics is affected by insecure direct object references. It occurs due to missing access control checks, which fail to verify whether a user should be allowed to access specific data.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42169" + }, + { + "type": "WEB", + "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-639" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-hrff-h5x9-vqrp/GHSA-hrff-h5x9-vqrp.json b/advisories/unreviewed/2025/01/GHSA-hrff-h5x9-vqrp/GHSA-hrff-h5x9-vqrp.json new file mode 100644 index 0000000000000..c525fb285e5ab --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-hrff-h5x9-vqrp/GHSA-hrff-h5x9-vqrp.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hrff-h5x9-vqrp", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2024-11327" + ], + "details": "The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.4.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11327" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/clickwhale/tags/2.3.0/includes/admin/links/Clickwhale_Links_List_Table.php#L384" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219341%40clickwhale&new=3219341%40clickwhale&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/96c5836f-6d33-4a56-b30b-5e5d95b81b6b?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-hv5j-98fx-p9cw/GHSA-hv5j-98fx-p9cw.json b/advisories/unreviewed/2025/01/GHSA-hv5j-98fx-p9cw/GHSA-hv5j-98fx-p9cw.json new file mode 100644 index 0000000000000..d295973c4d69a --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-hv5j-98fx-p9cw/GHSA-hv5j-98fx-p9cw.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hv5j-98fx-p9cw", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2024-12627" + ], + "details": "The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to the capture_email AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12627" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3219466/coupon-x-discount-pop-up/trunk/inc/class-cx-rest.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/468be776-8804-4d2f-8eaf-841bbf598ef9?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-502" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-mf45-qm92-8v76/GHSA-mf45-qm92-8v76.json b/advisories/unreviewed/2025/01/GHSA-mf45-qm92-8v76/GHSA-mf45-qm92-8v76.json new file mode 100644 index 0000000000000..e181362078dfb --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-mf45-qm92-8v76/GHSA-mf45-qm92-8v76.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mf45-qm92-8v76", + "modified": "2025-01-11T03:30:41Z", + "published": "2025-01-11T03:30:41Z", + "aliases": [ + "CVE-2025-0105" + ], + "details": "An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Green" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0105" + }, + { + "type": "WEB", + "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-73" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-mhj4-9938-5fpw/GHSA-mhj4-9938-5fpw.json b/advisories/unreviewed/2025/01/GHSA-mhj4-9938-5fpw/GHSA-mhj4-9938-5fpw.json new file mode 100644 index 0000000000000..31b4d352d2f63 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-mhj4-9938-5fpw/GHSA-mhj4-9938-5fpw.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mhj4-9938-5fpw", + "modified": "2025-01-11T03:30:41Z", + "published": "2025-01-11T03:30:41Z", + "aliases": [ + "CVE-2025-0107" + ], + "details": "An OS command injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Green" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0107" + }, + { + "type": "WEB", + "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-p2jc-29qr-48gx/GHSA-p2jc-29qr-48gx.json b/advisories/unreviewed/2025/01/GHSA-p2jc-29qr-48gx/GHSA-p2jc-29qr-48gx.json new file mode 100644 index 0000000000000..994d9a0a12ba8 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-p2jc-29qr-48gx/GHSA-p2jc-29qr-48gx.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p2jc-29qr-48gx", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2024-12404" + ], + "details": "The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12404" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/internal-link-shortcode/trunk/internal-link-shortcode.php#L82" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1661bb28-e5b4-4319-84bb-6cbeac266147?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-qfq8-mv2q-hvwp/GHSA-qfq8-mv2q-hvwp.json b/advisories/unreviewed/2025/01/GHSA-qfq8-mv2q-hvwp/GHSA-qfq8-mv2q-hvwp.json new file mode 100644 index 0000000000000..7f6bdde3b8ac3 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-qfq8-mv2q-hvwp/GHSA-qfq8-mv2q-hvwp.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qfq8-mv2q-hvwp", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2025-0104" + ], + "details": "A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute malicious JavaScript code in the context of an authenticated Expedition user’s browser if that authenticated user clicks a malicious link that allows phishing attacks and could lead to Expedition browser-session theft.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Amber" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0104" + }, + { + "type": "WEB", + "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-qr4v-frmp-3xrc/GHSA-qr4v-frmp-3xrc.json b/advisories/unreviewed/2025/01/GHSA-qr4v-frmp-3xrc/GHSA-qr4v-frmp-3xrc.json new file mode 100644 index 0000000000000..ece1f9737aba7 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-qr4v-frmp-3xrc/GHSA-qr4v-frmp-3xrc.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qr4v-frmp-3xrc", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2024-12204" + ], + "details": "The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in the class-cx-rest.php file in all versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create 100% off coupons, delete posts, delete leads, and update coupon statuses.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12204" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3219466/coupon-x-discount-pop-up/trunk/inc/class-cx-rest.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e52d8b5e-727f-474a-a255-c24033db17d8?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-r6wv-x735-w2v5/GHSA-r6wv-x735-w2v5.json b/advisories/unreviewed/2025/01/GHSA-r6wv-x735-w2v5/GHSA-r6wv-x735-w2v5.json new file mode 100644 index 0000000000000..877f7c16750da --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-r6wv-x735-w2v5/GHSA-r6wv-x735-w2v5.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r6wv-x735-w2v5", + "modified": "2025-01-11T03:30:40Z", + "published": "2025-01-11T03:30:40Z", + "aliases": [ + "CVE-2025-0106" + ], + "details": "A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Green" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0106" + }, + { + "type": "WEB", + "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-155" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-11T03:15:22Z" + } +} \ No newline at end of file