diff --git a/2024/21xxx/CVE-2024-21484.json b/2024/21xxx/CVE-2024-21484.json index 9a5fca65339..800d2b6eef3 100644 --- a/2024/21xxx/CVE-2024-21484.json +++ b/2024/21xxx/CVE-2024-21484.json @@ -11,7 +11,7 @@ "description_data": [ { "lang": "eng", - "value": "Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by exploiting this vulnerability. Exploiting this vulnerability requires the attacker to have access to a large number of ciphertexts encrypted with the same key.\r\r Workaround \r\rThe vulnerability can be mitigated by finding and replacing RSA and RSAOAEP decryption with another crypto library." + "value": "Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by exploiting the Marvin security flaw. Exploiting this vulnerability requires the attacker to have access to a large number of ciphertexts encrypted with the same key.\r\r Workaround \r\rThe vulnerability can be mitigated by finding and replacing RSA and RSAOAEP decryption with another crypto library." } ] }, diff --git a/2024/21xxx/CVE-2024-21485.json b/2024/21xxx/CVE-2024-21485.json index 6b708bd485f..b568d532f15 100644 --- a/2024/21xxx/CVE-2024-21485.json +++ b/2024/21xxx/CVE-2024-21485.json @@ -11,7 +11,7 @@ "description_data": [ { "lang": "eng", - "value": "Versions of the package dash-core-components before 2.13.0; all versions of the package dash-core-components; versions of the package dash before 2.15.0; all versions of the package dash-html-components; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site Scripting (XSS) when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this vulnerability could steal the data that's visible to another user who opens that view - not just the data already included on the page, but they could also, in theory, make additional requests and access other data accessible to this user. In some cases, they could also steal the access tokens of that user, which would allow the attacker to act as that user, including viewing other apps and resources hosted on the same server.\r\r**Note:**\r\rThis is only exploitable in Dash apps that include some mechanism to store user input to be reloaded by a different user." + "value": "Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site Scripting (XSS) when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this vulnerability could steal the data that's visible to another user who opens that view - not just the data already included on the page, but they could also, in theory, make additional requests and access other data accessible to this user. In some cases, they could also steal the access tokens of that user, which would allow the attacker to act as that user, including viewing other apps and resources hosted on the same server.\r\r**Note:**\r\rThis is only exploitable in Dash apps that include some mechanism to store user input to be reloaded by a different user." } ] }, @@ -66,7 +66,7 @@ { "version_affected": "<", "version_name": "0", - "version_value": "*" + "version_value": "2.0.0" } ] } diff --git a/2024/21xxx/CVE-2024-21490.json b/2024/21xxx/CVE-2024-21490.json index e503ed0c4ae..341414259e1 100644 --- a/2024/21xxx/CVE-2024-21490.json +++ b/2024/21xxx/CVE-2024-21490.json @@ -11,7 +11,7 @@ "description_data": [ { "lang": "eng", - "value": "This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With a large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. \r\r\r**Note:**\r\rThis package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core)." + "value": "This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. \r\r\r**Note:**\r\rThis package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core)." } ] }, @@ -46,6 +46,30 @@ } ] } + }, + { + "product_name": "org.webjars.bower:angular", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_name": "1.3.0", + "version_value": "*" + } + ] + } + }, + { + "product_name": "org.webjars.npm:angular", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_name": "1.3.0", + "version_value": "*" + } + ] + } } ] } @@ -60,6 +84,16 @@ "refsource": "MISC", "name": "https://security.snyk.io/vuln/SNYK-JS-ANGULAR-6091113" }, + { + "url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-6241746", + "refsource": "MISC", + "name": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-6241746" + }, + { + "url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6241747", + "refsource": "MISC", + "name": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6241747" + }, { "url": "https://stackblitz.com/edit/angularjs-vulnerability-ng-srcset-redos", "refsource": "MISC", diff --git a/2024/21xxx/CVE-2024-21491.json b/2024/21xxx/CVE-2024-21491.json index 76e34b4aff3..4546801dfef 100644 --- a/2024/21xxx/CVE-2024-21491.json +++ b/2024/21xxx/CVE-2024-21491.json @@ -92,12 +92,12 @@ "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", - "confidentialityImpact": "HIGH", + "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "availabilityImpact": "NONE", - "baseScore": 6.8, + "baseScore": 5.9, "baseSeverity": "MEDIUM", - "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" } ] } diff --git a/2024/21xxx/CVE-2024-21501.json b/2024/21xxx/CVE-2024-21501.json index 608c3f6dc13..e82b41db690 100644 --- a/2024/21xxx/CVE-2024-21501.json +++ b/2024/21xxx/CVE-2024-21501.json @@ -46,6 +46,18 @@ } ] } + }, + { + "product_name": "org.webjars.npm:sanitize-html", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_name": "0", + "version_value": "*" + } + ] + } } ] } @@ -60,6 +72,11 @@ "refsource": "MISC", "name": "https://security.snyk.io/vuln/SNYK-JS-SANITIZEHTML-6256334" }, + { + "url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6276557", + "refsource": "MISC", + "name": "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6276557" + }, { "url": "https://gist.github.com/Slonser/8b4d061abe6ee1b2e10c7242987674cf", "refsource": "MISC", diff --git a/2024/2xxx/CVE-2024-2222.json b/2024/2xxx/CVE-2024-2222.json new file mode 100644 index 00000000000..2b5cf0d25f9 --- /dev/null +++ b/2024/2xxx/CVE-2024-2222.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-2222", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2024/2xxx/CVE-2024-2223.json b/2024/2xxx/CVE-2024-2223.json new file mode 100644 index 00000000000..889114eb9f6 --- /dev/null +++ b/2024/2xxx/CVE-2024-2223.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-2223", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2024/2xxx/CVE-2024-2224.json b/2024/2xxx/CVE-2024-2224.json new file mode 100644 index 00000000000..46b6c7bda1f --- /dev/null +++ b/2024/2xxx/CVE-2024-2224.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-2224", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2024/2xxx/CVE-2024-2225.json b/2024/2xxx/CVE-2024-2225.json new file mode 100644 index 00000000000..2e66f81ec9d --- /dev/null +++ b/2024/2xxx/CVE-2024-2225.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-2225", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file