admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-08 19:47:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-04-27T04:00:26.898818+00:00

Browse Source
This commit is contained in:
René Helmke 2023-04-27 06:00:29 +02:00
parent 4124cd03f5
commit 9ba4be40b5
2 changed files with 26 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
CVE-2023/CVE-2023-312xx/CVE-2023-31287.json Normal file
View File

@ -0,0 +1,20 @@
{
"id": "CVE-2023-31287",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-04-27T03:15:10.200",
"lastModified": "2023-04-27T03:15:10.200",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the corresponding user. The token expires only 3 hours after issuance and is sent as a query parameter when resetting. An attacker with access to the browser history can thus use the token again to change the password in order to take over the account."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2",
"source": "cve@mitre.org"
}
]
}

12
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD in 2 hour periods.
### Last repository update ### Last repository update
```plain ```plain
2023-04-27T02:00:28.238242+00:00 2023-04-27T04:00:26.898818+00:00
``` ```
### Most recent CVE modification timestamp synchronized with NVD ### Most recent CVE modification timestamp synchronized with NVD
```plain ```plain
2023-04-27T01:41:09.010000+00:00 2023-04-27T03:15:10.200000+00:00
``` ```
### Last Data Feed release ### Last Data Feed release
@ -29,20 +29,20 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-datafeeds/r
### Total numbers of included CVEs ### Total numbers of included CVEs
```plai#n ```plai#n
213642 213651
``` ```
### CVEs added in the last commit ### CVEs added in the last commit
Recently added CVEs: `0` Recently added CVEs: `1`
* CVE-2023-31287 (*2023-04-27T03:15:10.200*)
### CVEs modified in the last commit ### CVEs modified in the last commit
Recently modified CVEs: `1` Recently modified CVEs: `0`
* CVE-2021-0874 (*2023-04-27T01:41:09.010*)
## Download and Usage ## Download and Usage