Auto-Update: 2023-06-30T12:00:28.435242+00:00

This commit is contained in:
cad-safe-bot 2023-06-30 12:00:31 +00:00
parent e01cde8a15
commit cb270ab4d8
3 changed files with 68 additions and 8 deletions

View File

@ -2,12 +2,12 @@
"id": "CVE-2023-0342",
"sourceIdentifier": "cna@mongodb.com",
"published": "2023-06-09T09:15:09.383",
"lastModified": "2023-06-21T02:00:33.950",
"vulnStatus": "Analyzed",
"lastModified": "2023-06-30T10:15:09.377",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
"value": "MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12"
"value": "MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12\n\n"
}
],
"metrics": {

View File

@ -0,0 +1,59 @@
{
"id": "CVE-2023-3479",
"sourceIdentifier": "security@huntr.dev",
"published": "2023-06-30T10:15:09.567",
"lastModified": "2023-06-30T10:15:09.567",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "security@huntr.dev",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "security@huntr.dev",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/hestiacp/hestiacp/commit/2326aa525a7ba14513af783f29cb5e62a476e67a",
"source": "security@huntr.dev"
},
{
"url": "https://huntr.dev/bounties/6ac5cf87-6350-4645-8930-8f2876427723",
"source": "security@huntr.dev"
}
]
}

View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-06-30T10:00:25.456133+00:00
2023-06-30T12:00:28.435242+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-06-30T08:15:21.417000+00:00
2023-06-30T10:15:09.567000+00:00
```
### Last Data Feed Release
@ -29,20 +29,21 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
218940
218941
```
### CVEs added in the last Commit
Recently added CVEs: `1`
* [CVE-2023-3477](CVE-2023/CVE-2023-34xx/CVE-2023-3477.json) (`2023-06-30T08:15:21.417`)
* [CVE-2023-3479](CVE-2023/CVE-2023-34xx/CVE-2023-3479.json) (`2023-06-30T10:15:09.567`)
### CVEs modified in the last Commit
Recently modified CVEs: `0`
Recently modified CVEs: `1`
* [CVE-2023-0342](CVE-2023/CVE-2023-03xx/CVE-2023-0342.json) (`2023-06-30T10:15:09.377`)
## Download and Usage