mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-05-07 19:17:10 +00:00
"-Synchronized-Data."
This commit is contained in:
CVE Team
parent
381fe96766
commit
357c7b7656
@ -93,6 +93,11 @@
|
||||
"refsource": "CONFIRM",
|
||||
"name": "https://security.netapp.com/advisory/ntap-20230208-0002/",
|
||||
"url": "https://security.netapp.com/advisory/ntap-20230208-0002/"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20230517 curl: CVE-2023-28322: more POST-after-PUT confusion",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2023/05/17/4"
|
||||
}
|
||||
]
|
||||
},
|
||||
|
||||
@ -1,17 +1,203 @@
|
||||
{
|
||||
"data_version": "4.0",
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2023-2745",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
"ASSIGNER": "security@wordfence.com",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
"value": "WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the \u2018wp_lang\u2019 parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"vendor_name": "WordPress Foundation",
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "WordPress",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_affected": "<=",
|
||||
"version_name": "*",
|
||||
"version_value": "4.1"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.1",
|
||||
"version_value": "4.1.38"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.2",
|
||||
"version_value": "4.2.35"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.3",
|
||||
"version_value": "4.3.31"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.4",
|
||||
"version_value": "4.4.30"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.5",
|
||||
"version_value": "4.5.29"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.6",
|
||||
"version_value": "4.6.26"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.7",
|
||||
"version_value": "4.7.26"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.8",
|
||||
"version_value": "4.8.22"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "4.9",
|
||||
"version_value": "4.9.23"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.0",
|
||||
"version_value": "5.0.19"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.1",
|
||||
"version_value": "5.1.16"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.2",
|
||||
"version_value": "5.2.18"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.3",
|
||||
"version_value": "5.3.15"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.4",
|
||||
"version_value": "5.4.13"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.5",
|
||||
"version_value": "5.5.12"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.6",
|
||||
"version_value": "5.6.11"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.7",
|
||||
"version_value": "5.7.9"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.8",
|
||||
"version_value": "5.8.7"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "5.9",
|
||||
"version_value": "5.9.6"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "6.0",
|
||||
"version_value": "6.0.4"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "6.1",
|
||||
"version_value": "6.1.2"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "6.2",
|
||||
"version_value": "6.2.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/edcf46b6-368e-49c0-b2c3-99bf6e2d358f?source=cve",
|
||||
"refsource": "MISC",
|
||||
"name": "https://www.wordfence.com/threat-intel/vulnerabilities/id/edcf46b6-368e-49c0-b2c3-99bf6e2d358f?source=cve"
|
||||
},
|
||||
{
|
||||
"url": "https://wordpress.org/news/2023/05/wordpress-6-2-1-maintenance-security-release/",
|
||||
"refsource": "MISC",
|
||||
"name": "https://wordpress.org/news/2023/05/wordpress-6-2-1-maintenance-security-release/"
|
||||
},
|
||||
{
|
||||
"url": "https://core.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=55765%40%2F&new=55765%40%2F&sfp_email=&sfph_mail=",
|
||||
"refsource": "MISC",
|
||||
"name": "https://core.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=55765%40%2F&new=55765%40%2F&sfp_email=&sfph_mail="
|
||||
}
|
||||
]
|
||||
},
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ramuel Gall"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Matt Rusnak"
|
||||
}
|
||||
],
|
||||
"impact": {
|
||||
"cvss": [
|
||||
{
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
18
2023/2xxx/CVE-2023-2755.json
Normal file
18
2023/2xxx/CVE-2023-2755.json
Normal file
@ -0,0 +1,18 @@
|
||||
{
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2023-2755",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@ -1,17 +1,84 @@
|
||||
{
|
||||
"data_version": "4.0",
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2023-31208",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
"ASSIGNER": "security@checkmk.com",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
"value": "Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-140: Improper Neutralization of Delimiters",
|
||||
"cweId": "CWE-140"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"vendor_name": "Checkmk GmbH",
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "Checkmk",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "2.2.0",
|
||||
"version_value": "2.2.0b8"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "2.1.0",
|
||||
"version_value": "2.1.0p28"
|
||||
},
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "2.0.0",
|
||||
"version_value": "2.0.0p36"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://checkmk.com/werk/15191",
|
||||
"refsource": "MISC",
|
||||
"name": "https://checkmk.com/werk/15191"
|
||||
}
|
||||
]
|
||||
},
|
||||
"impact": {
|
||||
"cvss": [
|
||||
{
|
||||
"baseScore": 8.3,
|
||||
"baseSeverity": "HIGH",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
|
||||
"version": "3.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user