diff --git a/CVE-2023/CVE-2023-53xx/CVE-2023-5332.json b/CVE-2023/CVE-2023-53xx/CVE-2023-5332.json new file mode 100644 index 00000000000..31978c239b4 --- /dev/null +++ b/CVE-2023/CVE-2023-53xx/CVE-2023-5332.json @@ -0,0 +1,59 @@ +{ + "id": "CVE-2023-5332", + "sourceIdentifier": "cve@gitlab.com", + "published": "2023-12-04T07:15:07.120", + "lastModified": "2023-12-04T07:15:07.120", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseScore": 5.9, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 0.7, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-16" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8171", + "source": "cve@gitlab.com" + }, + { + "url": "https://www.hashicorp.com/blog/protecting-consul-from-rce-risk-in-specific-configurations", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index ae4da39851a..45930b37876 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2023-12-04T07:00:17.835565+00:00 +2023-12-04T09:01:01.073781+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2023-12-04T06:15:07.173000+00:00 +2023-12-04T07:15:07.120000+00:00 ``` ### Last Data Feed Release @@ -29,16 +29,14 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -232120 +232121 ``` ### CVEs added in the last Commit -Recently added CVEs: `3` +Recently added CVEs: `1` -* [CVE-2023-49093](CVE-2023/CVE-2023-490xx/CVE-2023-49093.json) (`2023-12-04T05:15:07.430`) -* [CVE-2023-49108](CVE-2023/CVE-2023-491xx/CVE-2023-49108.json) (`2023-12-04T06:15:07.063`) -* [CVE-2023-49287](CVE-2023/CVE-2023-492xx/CVE-2023-49287.json) (`2023-12-04T06:15:07.173`) +* [CVE-2023-5332](CVE-2023/CVE-2023-53xx/CVE-2023-5332.json) (`2023-12-04T07:15:07.120`) ### CVEs modified in the last Commit