From 33ea71e2d1499d454c5112da8e682d1cd424b981 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Fri, 19 May 2023 04:00:29 +0000 Subject: [PATCH] Auto-Update: 2023-05-19 04:00:25.985755+00:00 --- CVE-2023/CVE-2023-17xx/CVE-2023-1729.json | 10 ++- CVE-2023/CVE-2023-248xx/CVE-2023-24805.json | 6 +- CVE-2023/CVE-2023-27xx/CVE-2023-2704.json | 67 +++++++++++++++++++++ README.md | 22 +++---- 4 files changed, 89 insertions(+), 16 deletions(-) create mode 100644 CVE-2023/CVE-2023-27xx/CVE-2023-2704.json diff --git a/CVE-2023/CVE-2023-17xx/CVE-2023-1729.json b/CVE-2023/CVE-2023-17xx/CVE-2023-1729.json index eb8914b3b52..633ce19b533 100644 --- a/CVE-2023/CVE-2023-17xx/CVE-2023-1729.json +++ b/CVE-2023/CVE-2023-17xx/CVE-2023-1729.json @@ -2,7 +2,7 @@ "id": "CVE-2023-1729", "sourceIdentifier": "secalert@redhat.com", "published": "2023-05-15T22:15:10.350", - "lastModified": "2023-05-16T10:46:36.147", + "lastModified": "2023-05-19T03:15:08.623", "vulnStatus": "Awaiting Analysis", "descriptions": [ { @@ -35,6 +35,14 @@ { "url": "https://github.com/LibRaw/LibRaw/issues/557", "source": "secalert@redhat.com" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZ6XF5WTPJ4GLXQ62JVRDZSVSJHXNQU/", + "source": "secalert@redhat.com" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E5ZJ3UBTJBZHNPJQFOSGM5L7WAHHE2GY/", + "source": "secalert@redhat.com" } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-248xx/CVE-2023-24805.json b/CVE-2023/CVE-2023-248xx/CVE-2023-24805.json index 331ce86a66e..7150a148f9a 100644 --- a/CVE-2023/CVE-2023-248xx/CVE-2023-24805.json +++ b/CVE-2023/CVE-2023-248xx/CVE-2023-24805.json @@ -2,7 +2,7 @@ "id": "CVE-2023-24805", "sourceIdentifier": "security-advisories@github.com", "published": "2023-05-17T18:15:09.177", - "lastModified": "2023-05-18T12:53:07.890", + "lastModified": "2023-05-19T03:15:08.763", "vulnStatus": "Awaiting Analysis", "descriptions": [ { @@ -54,6 +54,10 @@ { "url": "https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-gpxc-v2m8-fr3x", "source": "security-advisories@github.com" + }, + { + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YNCGL2ZTAS2GFF23QFT55UFWIDMI4ZJK/", + "source": "security-advisories@github.com" } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-27xx/CVE-2023-2704.json b/CVE-2023/CVE-2023-27xx/CVE-2023-2704.json new file mode 100644 index 00000000000..9358c971e30 --- /dev/null +++ b/CVE-2023/CVE-2023-27xx/CVE-2023-2704.json @@ -0,0 +1,67 @@ +{ + "id": "CVE-2023-2704", + "sourceIdentifier": "security@wordfence.com", + "published": "2023-05-19T03:15:08.840", + "lastModified": "2023-05-19T03:15:08.840", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 9.8, + "baseSeverity": "CRITICAL" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/bp-social-connect/tags/1.5/includes/social/facebook/class.facebook.php#L138", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/bp-social-connect/tags/1.5/includes/social/facebook/class.facebook.php#L188", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2914042%40bp-social-connect%2Ftrunk&old=1904372%40bp-social-connect%2Ftrunk&sfp_email=&sfph_mail=#file6", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/44c96df2-530a-4ebe-b722-c606a7b135f9?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 2aa19212c75..1358a0e648f 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2023-05-19T02:00:45.437942+00:00 +2023-05-19T04:00:25.985755+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2023-05-19T01:56:39.580000+00:00 +2023-05-19T03:15:08.840000+00:00 ``` ### Last Data Feed Release @@ -29,28 +29,22 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -215647 +215648 ``` ### CVEs added in the last Commit -Recently added CVEs: `0` +Recently added CVEs: `1` +* [CVE-2023-2704](CVE-2023/CVE-2023-27xx/CVE-2023-2704.json) (`2023-05-19T03:15:08.840`) ### CVEs modified in the last Commit -Recently modified CVEs: `9` +Recently modified CVEs: `2` -* [CVE-2023-25568](CVE-2023/CVE-2023-255xx/CVE-2023-25568.json) (`2023-05-19T01:53:27.043`) -* [CVE-2023-32668](CVE-2023/CVE-2023-326xx/CVE-2023-32668.json) (`2023-05-19T01:53:41.537`) -* [CVE-2023-25776](CVE-2023/CVE-2023-257xx/CVE-2023-25776.json) (`2023-05-19T01:54:22.113`) -* [CVE-2023-2672](CVE-2023/CVE-2023-26xx/CVE-2023-2672.json) (`2023-05-19T01:55:50.923`) -* [CVE-2023-2669](CVE-2023/CVE-2023-26xx/CVE-2023-2669.json) (`2023-05-19T01:56:16.017`) -* [CVE-2023-2668](CVE-2023/CVE-2023-26xx/CVE-2023-2668.json) (`2023-05-19T01:56:23.603`) -* [CVE-2023-2667](CVE-2023/CVE-2023-26xx/CVE-2023-2667.json) (`2023-05-19T01:56:31.277`) -* [CVE-2023-2670](CVE-2023/CVE-2023-26xx/CVE-2023-2670.json) (`2023-05-19T01:56:35.927`) -* [CVE-2023-2671](CVE-2023/CVE-2023-26xx/CVE-2023-2671.json) (`2023-05-19T01:56:39.580`) +* [CVE-2023-1729](CVE-2023/CVE-2023-17xx/CVE-2023-1729.json) (`2023-05-19T03:15:08.623`) +* [CVE-2023-24805](CVE-2023/CVE-2023-248xx/CVE-2023-24805.json) (`2023-05-19T03:15:08.763`) ## Download and Usage