admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-08 11:37:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-12-01T09:00:19.937917+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2023-12-01 09:00:23 +00:00
parent 1a48d0c87b
commit 293b498403
11 changed files with 586 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
CVE-2023/CVE-2023-34xx/CVE-2023-3443.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-3443",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:07.600",
"lastModified": "2023-12-01T07:15:07.600",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a Guest user to add an emoji on confidential work items."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW"
},
"exploitabilityScore": 1.6,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/416497",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2036500",
"source": "cve@gitlab.com"
}
]
}

59
CVE-2023/CVE-2023-39xx/CVE-2023-3949.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-3949",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:08.973",
"lastModified": "2023-12-01T07:15:08.973",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint when release access on the public was set to only project members."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/419664",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2079374",
"source": "cve@gitlab.com"
}
]
}

59
CVE-2023/CVE-2023-39xx/CVE-2023-3964.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-3964",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:09.620",
"lastModified": "2023-12-01T07:15:09.620",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab affecting all versions starting from 13.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for users to access composer packages on public projects that have package registry disabled in the project settings."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/419857",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2037316",
"source": "cve@gitlab.com"
}
]
}

59
CVE-2023/CVE-2023-43xx/CVE-2023-4317.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-4317",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:10.197",
"lastModified": "2023-12-01T07:15:10.197",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab affecting all versions starting from 9.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a user with the Developer role to update a pipeline schedule from an unprotected branch to a protected branch."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/421846",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2089517",
"source": "cve@gitlab.com"
}
]
}

59
CVE-2023/CVE-2023-46xx/CVE-2023-4658.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-4658",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:10.807",
"lastModified": "2023-12-01T07:15:10.807",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the `Allowed to merge` permission as a guest user, when granted the permission through a group."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW"
},
"exploitabilityScore": 1.6,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/423835",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2104540",
"source": "cve@gitlab.com"
}
]
}

59
CVE-2023/CVE-2023-49xx/CVE-2023-4912.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-4912",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:11.387",
"lastModified": "2023-12-01T07:15:11.387",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to cause a client-side denial of service using malicious crafted mermaid diagram input."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/424882",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2137421",
"source": "cve@gitlab.com"
}
]
}

59
CVE-2023/CVE-2023-52xx/CVE-2023-5226.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-5226",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:12.003",
"lastModified": "2023-12-01T07:15:12.003",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to manipulate repository content in the UI."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/426400",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2173053",
"source": "cve@gitlab.com"
}
]
}

40
CVE-2023/CVE-2023-59xx/CVE-2023-5915.json Normal file
View File

@ -0,0 +1,40 @@
{
"id": "CVE-2023-5915",
"sourceIdentifier": "7168b535-132a-4efe-a076-338f829b2eb9",
"published": "2023-12-01T07:15:12.627",
"lastModified": "2023-12-01T07:15:12.627",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation.\u00a0This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet, the maintenance homepage of the controller could not be accessed. Therefore, functions of the maintenance homepage, changing configuration, viewing logs, etc. are not available. But the controller\u2019s operation is not stopped by the condition.\n\nThe affected products and versions are as follows: STARDOM FCN/FCJ R1.01 to R4.31.\n"
}
],
"metrics": {},
"weaknesses": [
{
"source": "7168b535-132a-4efe-a076-338f829b2eb9",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"references": [
{
"url": "https://jvn.jp/vu/JVNVU95177889/index.html",
"source": "7168b535-132a-4efe-a076-338f829b2eb9"
},
{
"url": "https://web-material3.yokogawa.com/1/35463/files/YSAR-23-0003-E.pdf",
"source": "7168b535-132a-4efe-a076-338f829b2eb9"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-02",
"source": "7168b535-132a-4efe-a076-338f829b2eb9"
}
]
}

59
CVE-2023/CVE-2023-59xx/CVE-2023-5995.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-5995",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:13.033",
"lastModified": "2023-12-01T07:15:13.033",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the policy bot to gain access to internal projects."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 0.7,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/425361",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2138880",
"source": "cve@gitlab.com"
}
]
}

59
CVE-2023/CVE-2023-60xx/CVE-2023-6033.json Normal file
View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-6033",
"sourceIdentifier": "cve@gitlab.com",
"published": "2023-12-01T07:15:13.633",
"lastModified": "2023-12-01T07:15:13.633",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript in victim's browser."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 2.3,
"impactScore": 5.8
}
]
},
"weaknesses": [
{
"source": "cve@gitlab.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/431201",
"source": "cve@gitlab.com"
},
{
"url": "https://hackerone.com/reports/2236039",
"source": "cve@gitlab.com"
}
]
}

24
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-12-01T07:00:18.051841+00:00
2023-12-01T09:00:19.937917+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-12-01T06:15:47.903000+00:00
2023-12-01T07:15:13.633000+00:00
```
### Last Data Feed Release
@ -29,23 +29,29 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
231930
231940
```
### CVEs added in the last Commit
Recently added CVEs: `2`
Recently added CVEs: `10`
* [CVE-2023-45252](CVE-2023/CVE-2023-452xx/CVE-2023-45252.json) (`2023-12-01T06:15:47.840`)
* [CVE-2023-45253](CVE-2023/CVE-2023-452xx/CVE-2023-45253.json) (`2023-12-01T06:15:47.903`)
* [CVE-2023-3443](CVE-2023/CVE-2023-34xx/CVE-2023-3443.json) (`2023-12-01T07:15:07.600`)
* [CVE-2023-3949](CVE-2023/CVE-2023-39xx/CVE-2023-3949.json) (`2023-12-01T07:15:08.973`)
* [CVE-2023-3964](CVE-2023/CVE-2023-39xx/CVE-2023-3964.json) (`2023-12-01T07:15:09.620`)
* [CVE-2023-4317](CVE-2023/CVE-2023-43xx/CVE-2023-4317.json) (`2023-12-01T07:15:10.197`)
* [CVE-2023-4658](CVE-2023/CVE-2023-46xx/CVE-2023-4658.json) (`2023-12-01T07:15:10.807`)
* [CVE-2023-4912](CVE-2023/CVE-2023-49xx/CVE-2023-4912.json) (`2023-12-01T07:15:11.387`)
* [CVE-2023-5226](CVE-2023/CVE-2023-52xx/CVE-2023-5226.json) (`2023-12-01T07:15:12.003`)
* [CVE-2023-5915](CVE-2023/CVE-2023-59xx/CVE-2023-5915.json) (`2023-12-01T07:15:12.627`)
* [CVE-2023-5995](CVE-2023/CVE-2023-59xx/CVE-2023-5995.json) (`2023-12-01T07:15:13.033`)
* [CVE-2023-6033](CVE-2023/CVE-2023-60xx/CVE-2023-6033.json) (`2023-12-01T07:15:13.633`)
### CVEs modified in the last Commit
Recently modified CVEs: `2`
Recently modified CVEs: `0`
* [CVE-2022-45582](CVE-2022/CVE-2022-455xx/CVE-2022-45582.json) (`2023-12-01T06:15:47.530`)
* [CVE-2023-39325](CVE-2023/CVE-2023-393xx/CVE-2023-39325.json) (`2023-12-01T06:15:47.707`)
## Download and Usage