From 1d337adaec6598e3e246d49f851999550e8faedc Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Tue, 23 May 2023 06:00:33 +0000 Subject: [PATCH] Auto-Update: 2023-05-23 06:00:29.805309+00:00 --- CVE-2023/CVE-2023-28xx/CVE-2023-2844.json | 59 +++++++++++++++++++++++ CVE-2023/CVE-2023-28xx/CVE-2023-2845.json | 59 +++++++++++++++++++++++ README.md | 35 +++----------- 3 files changed, 124 insertions(+), 29 deletions(-) create mode 100644 CVE-2023/CVE-2023-28xx/CVE-2023-2844.json create mode 100644 CVE-2023/CVE-2023-28xx/CVE-2023-2845.json diff --git a/CVE-2023/CVE-2023-28xx/CVE-2023-2844.json b/CVE-2023/CVE-2023-28xx/CVE-2023-2844.json new file mode 100644 index 00000000000..c0b6616812f --- /dev/null +++ b/CVE-2023/CVE-2023-28xx/CVE-2023-2844.json @@ -0,0 +1,59 @@ +{ + "id": "CVE-2023-2844", + "sourceIdentifier": "security@huntr.dev", + "published": "2023-05-23T04:15:09.497", + "lastModified": "2023-05-23T04:15:09.497", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "security@huntr.dev", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.2, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@huntr.dev", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/d9f55a44e579d312977b02317b2020de758b763a", + "source": "security@huntr.dev" + }, + { + "url": "https://huntr.dev/bounties/6644b36e-603d-4dbe-8ee2-5df8b8fb2e22", + "source": "security@huntr.dev" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-28xx/CVE-2023-2845.json b/CVE-2023/CVE-2023-28xx/CVE-2023-2845.json new file mode 100644 index 00000000000..45fe390daf7 --- /dev/null +++ b/CVE-2023/CVE-2023-28xx/CVE-2023-2845.json @@ -0,0 +1,59 @@ +{ + "id": "CVE-2023-2845", + "sourceIdentifier": "security@huntr.dev", + "published": "2023-05-23T05:15:08.827", + "lastModified": "2023-05-23T05:15:08.827", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Improper Access Control in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "security@huntr.dev", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 8.8, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@huntr.dev", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/d9f55a44e579d312977b02317b2020de758b763a", + "source": "security@huntr.dev" + }, + { + "url": "https://huntr.dev/bounties/ac10e81c-998e-4425-9d74-b985d9b0254c", + "source": "security@huntr.dev" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index c442b3dcd4d..04109839506 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2023-05-23T04:00:31.167330+00:00 +2023-05-23T06:00:29.805309+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2023-05-23T02:15:10.333000+00:00 +2023-05-23T05:15:08.827000+00:00 ``` ### Last Data Feed Release @@ -29,38 +29,15 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -215831 +215833 ``` ### CVEs added in the last Commit -Recently added CVEs: `29` +Recently added CVEs: `2` -* [CVE-2023-26595](CVE-2023/CVE-2023-265xx/CVE-2023-26595.json) (`2023-05-23T02:15:09.353`) -* [CVE-2023-27304](CVE-2023/CVE-2023-273xx/CVE-2023-27304.json) (`2023-05-23T02:15:09.397`) -* [CVE-2023-27384](CVE-2023/CVE-2023-273xx/CVE-2023-27384.json) (`2023-05-23T02:15:09.437`) -* [CVE-2023-27387](CVE-2023/CVE-2023-273xx/CVE-2023-27387.json) (`2023-05-23T02:15:09.480`) -* [CVE-2023-27388](CVE-2023/CVE-2023-273xx/CVE-2023-27388.json) (`2023-05-23T02:15:09.527`) -* [CVE-2023-27397](CVE-2023/CVE-2023-273xx/CVE-2023-27397.json) (`2023-05-23T02:15:09.570`) -* [CVE-2023-27507](CVE-2023/CVE-2023-275xx/CVE-2023-27507.json) (`2023-05-23T02:15:09.610`) -* [CVE-2023-27512](CVE-2023/CVE-2023-275xx/CVE-2023-27512.json) (`2023-05-23T02:15:09.653`) -* [CVE-2023-27514](CVE-2023/CVE-2023-275xx/CVE-2023-27514.json) (`2023-05-23T02:15:09.700`) -* [CVE-2023-27518](CVE-2023/CVE-2023-275xx/CVE-2023-27518.json) (`2023-05-23T02:15:09.743`) -* [CVE-2023-27521](CVE-2023/CVE-2023-275xx/CVE-2023-27521.json) (`2023-05-23T02:15:09.787`) -* [CVE-2023-27920](CVE-2023/CVE-2023-279xx/CVE-2023-27920.json) (`2023-05-23T02:15:09.827`) -* [CVE-2023-27921](CVE-2023/CVE-2023-279xx/CVE-2023-27921.json) (`2023-05-23T02:15:09.867`) -* [CVE-2023-27922](CVE-2023/CVE-2023-279xx/CVE-2023-27922.json) (`2023-05-23T02:15:09.907`) -* [CVE-2023-27923](CVE-2023/CVE-2023-279xx/CVE-2023-27923.json) (`2023-05-23T02:15:09.943`) -* [CVE-2023-27925](CVE-2023/CVE-2023-279xx/CVE-2023-27925.json) (`2023-05-23T02:15:09.983`) -* [CVE-2023-27926](CVE-2023/CVE-2023-279xx/CVE-2023-27926.json) (`2023-05-23T02:15:10.023`) -* [CVE-2023-28367](CVE-2023/CVE-2023-283xx/CVE-2023-28367.json) (`2023-05-23T02:15:10.067`) -* [CVE-2023-28390](CVE-2023/CVE-2023-283xx/CVE-2023-28390.json) (`2023-05-23T02:15:10.107`) -* [CVE-2023-28392](CVE-2023/CVE-2023-283xx/CVE-2023-28392.json) (`2023-05-23T02:15:10.140`) -* [CVE-2023-28394](CVE-2023/CVE-2023-283xx/CVE-2023-28394.json) (`2023-05-23T02:15:10.180`) -* [CVE-2023-28408](CVE-2023/CVE-2023-284xx/CVE-2023-28408.json) (`2023-05-23T02:15:10.220`) -* [CVE-2023-28409](CVE-2023/CVE-2023-284xx/CVE-2023-28409.json) (`2023-05-23T02:15:10.257`) -* [CVE-2023-28413](CVE-2023/CVE-2023-284xx/CVE-2023-28413.json) (`2023-05-23T02:15:10.293`) -* [CVE-2023-30469](CVE-2023/CVE-2023-304xx/CVE-2023-30469.json) (`2023-05-23T02:15:10.333`) +* [CVE-2023-2844](CVE-2023/CVE-2023-28xx/CVE-2023-2844.json) (`2023-05-23T04:15:09.497`) +* [CVE-2023-2845](CVE-2023/CVE-2023-28xx/CVE-2023-2845.json) (`2023-05-23T05:15:08.827`) ### CVEs modified in the last Commit