From 574ed79af77ee6bb8aed9f5e6d1b0fc08498786e Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 31 Jan 2024 21:00:31 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2024/1xxx/CVE-2024-1116.json | 127 +++++++++++++++++++++++++++++++++-- 2024/1xxx/CVE-2024-1117.json | 127 +++++++++++++++++++++++++++++++++-- 2024/1xxx/CVE-2024-1137.json | 18 +++++ 2024/1xxx/CVE-2024-1138.json | 18 +++++ 2024/1xxx/CVE-2024-1139.json | 18 +++++ 5 files changed, 300 insertions(+), 8 deletions(-) create mode 100644 2024/1xxx/CVE-2024-1137.json create mode 100644 2024/1xxx/CVE-2024-1138.json create mode 100644 2024/1xxx/CVE-2024-1139.json diff --git a/2024/1xxx/CVE-2024-1116.json b/2024/1xxx/CVE-2024-1116.json index 9bb0726de19..cbeb6f61471 100644 --- a/2024/1xxx/CVE-2024-1116.json +++ b/2024/1xxx/CVE-2024-1116.json @@ -1,17 +1,136 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-1116", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-252474 is the identifier assigned to this vulnerability." + }, + { + "lang": "deu", + "value": "Es wurde eine kritische Schwachstelle in openBI bis 1.0.8 ausgemacht. Betroffen hiervon ist die Funktion index der Datei /application/plugins/controller/Upload.php. Mit der Manipulation mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff \u00fcber das Netzwerk. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-434 Unrestricted Upload", + "cweId": "CWE-434" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "n/a", + "product": { + "product_data": [ + { + "product_name": "openBI", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "1.0.0" + }, + { + "version_affected": "=", + "version_value": "1.0.1" + }, + { + "version_affected": "=", + "version_value": "1.0.2" + }, + { + "version_affected": "=", + "version_value": "1.0.3" + }, + { + "version_affected": "=", + "version_value": "1.0.4" + }, + { + "version_affected": "=", + "version_value": "1.0.5" + }, + { + "version_affected": "=", + "version_value": "1.0.6" + }, + { + "version_affected": "=", + "version_value": "1.0.7" + }, + { + "version_affected": "=", + "version_value": "1.0.8" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://vuldb.com/?id.252474", + "refsource": "MISC", + "name": "https://vuldb.com/?id.252474" + }, + { + "url": "https://vuldb.com/?ctiid.252474", + "refsource": "MISC", + "name": "https://vuldb.com/?ctiid.252474" + }, + { + "url": "https://note.zhaoj.in/share/uCElTQRGWVyw", + "refsource": "MISC", + "name": "https://note.zhaoj.in/share/uCElTQRGWVyw" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "glzjin (VulDB User)" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "HIGH" + }, + { + "version": "3.0", + "baseScore": 7.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "HIGH" + }, + { + "version": "2.0", + "baseScore": 7.5, + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P" } ] } diff --git a/2024/1xxx/CVE-2024-1117.json b/2024/1xxx/CVE-2024-1117.json index 9649fe08f0a..63149d4d1b5 100644 --- a/2024/1xxx/CVE-2024-1117.json +++ b/2024/1xxx/CVE-2024-1117.json @@ -1,17 +1,136 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-1117", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability was found in openBI up to 1.0.8. It has been declared as critical. Affected by this vulnerability is the function index of the file /application/index/controller/Screen.php. The manipulation of the argument fileurl leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252475." + }, + { + "lang": "deu", + "value": "In openBI bis 1.0.8 wurde eine kritische Schwachstelle ausgemacht. Es geht um die Funktion index der Datei /application/index/controller/Screen.php. Durch die Manipulation des Arguments fileurl mit unbekannten Daten kann eine code injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-94 Code Injection", + "cweId": "CWE-94" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "n/a", + "product": { + "product_data": [ + { + "product_name": "openBI", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "1.0.0" + }, + { + "version_affected": "=", + "version_value": "1.0.1" + }, + { + "version_affected": "=", + "version_value": "1.0.2" + }, + { + "version_affected": "=", + "version_value": "1.0.3" + }, + { + "version_affected": "=", + "version_value": "1.0.4" + }, + { + "version_affected": "=", + "version_value": "1.0.5" + }, + { + "version_affected": "=", + "version_value": "1.0.6" + }, + { + "version_affected": "=", + "version_value": "1.0.7" + }, + { + "version_affected": "=", + "version_value": "1.0.8" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://vuldb.com/?id.252475", + "refsource": "MISC", + "name": "https://vuldb.com/?id.252475" + }, + { + "url": "https://vuldb.com/?ctiid.252475", + "refsource": "MISC", + "name": "https://vuldb.com/?ctiid.252475" + }, + { + "url": "https://note.zhaoj.in/share/Liu1nbjddxu4", + "refsource": "MISC", + "name": "https://note.zhaoj.in/share/Liu1nbjddxu4" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "glzjin (VulDB User)" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "HIGH" + }, + { + "version": "3.0", + "baseScore": 7.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "HIGH" + }, + { + "version": "2.0", + "baseScore": 7.5, + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P" } ] } diff --git a/2024/1xxx/CVE-2024-1137.json b/2024/1xxx/CVE-2024-1137.json new file mode 100644 index 00000000000..94cef34fb5a --- /dev/null +++ b/2024/1xxx/CVE-2024-1137.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-1137", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2024/1xxx/CVE-2024-1138.json b/2024/1xxx/CVE-2024-1138.json new file mode 100644 index 00000000000..adb02112266 --- /dev/null +++ b/2024/1xxx/CVE-2024-1138.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-1138", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2024/1xxx/CVE-2024-1139.json b/2024/1xxx/CVE-2024-1139.json new file mode 100644 index 00000000000..104c00f6906 --- /dev/null +++ b/2024/1xxx/CVE-2024-1139.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-1139", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file