Skip to content

Commit 70028ae

Browse files
tatianabgopherbot
tatianab
authored and
gopherbot
committed
data/reports: add 6 unreviewed reports
 - data/reports/GO-2024-3334.yaml - data/reports/GO-2024-3335.yaml - data/reports/GO-2024-3336.yaml - data/reports/GO-2024-3337.yaml - data/reports/GO-2024-3338.yaml - data/reports/GO-2024-3340.yaml Fixes #3334 Fixes #3335 Fixes #3336 Fixes #3337 Fixes #3338 Fixes #3340 Change-Id: Ib9003379c77c2cf40e02275f409ae5e4190e6185 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/636717 LUCI-TryBot-Result: Go LUCI <[email protected]> Reviewed-by: Damien Neil <[email protected]> Auto-Submit: Tatiana Bradley <[email protected]>
1 parent ed27275 commit 70028ae

12 files changed

+744
-0
lines changed

‎data/osv/GO-2024-3334.json

+103
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,103 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2024-3334",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2024-28053",
8+
"GHSA-qqc8-rv37-79q5"
9+
],
10+
"summary": "Mattermost Server Resource Exhaustion in github.com/mattermost/mattermost-server",
11+
"details": "Mattermost Server Resource Exhaustion in github.com/mattermost/mattermost-server",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/mattermost/mattermost-server",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "0.0.0-20240209181221-674f549daf0e"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
},
33+
{
34+
"package": {
35+
"name": "github.com/mattermost/mattermost-server/v5",
36+
"ecosystem": "Go"
37+
},
38+
"ranges": [
39+
{
40+
"type": "SEMVER",
41+
"events": [
42+
{
43+
"introduced": "0"
44+
}
45+
]
46+
}
47+
],
48+
"ecosystem_specific": {}
49+
},
50+
{
51+
"package": {
52+
"name": "github.com/mattermost/mattermost-server/v6",
53+
"ecosystem": "Go"
54+
},
55+
"ranges": [
56+
{
57+
"type": "SEMVER",
58+
"events": [
59+
{
60+
"introduced": "0"
61+
}
62+
]
63+
}
64+
],
65+
"ecosystem_specific": {}
66+
},
67+
{
68+
"package": {
69+
"name": "github.com/mattermost/mattermost/server/v8",
70+
"ecosystem": "Go"
71+
},
72+
"ranges": [
73+
{
74+
"type": "SEMVER",
75+
"events": [
76+
{
77+
"introduced": "0"
78+
}
79+
]
80+
}
81+
],
82+
"ecosystem_specific": {}
83+
}
84+
],
85+
"references": [
86+
{
87+
"type": "ADVISORY",
88+
"url": "https://github.com/advisories/GHSA-qqc8-rv37-79q5"
89+
},
90+
{
91+
"type": "ADVISORY",
92+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28053"
93+
},
94+
{
95+
"type": "WEB",
96+
"url": "https://mattermost.com/security-updates"
97+
}
98+
],
99+
"database_specific": {
100+
"url": "https://pkg.go.dev/vuln/GO-2024-3334",
101+
"review_status": "UNREVIEWED"
102+
}
103+
}

‎data/osv/GO-2024-3335.json

+52
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2024-3335",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2024-12289",
8+
"GHSA-xx83-cxmq-x89m"
9+
],
10+
"summary": "Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary",
11+
"details": "Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/hashicorp/boundary",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "0.18.2"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/advisories/GHSA-xx83-cxmq-x89m"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12289"
42+
},
43+
{
44+
"type": "WEB",
45+
"url": "https://discuss.hashicorp.com/t/hcsec-2024-28-boundary-controller-incorrectly-handles-http-requests-on-initialization-which-may-lead-to-a-denial-of-service"
46+
}
47+
],
48+
"database_specific": {
49+
"url": "https://pkg.go.dev/vuln/GO-2024-3335",
50+
"review_status": "UNREVIEWED"
51+
}
52+
}

‎data/osv/GO-2024-3336.json

+60
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2024-3336",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2024-55949",
8+
"GHSA-cwq8-g58r-32hg"
9+
],
10+
"summary": "MinIO vulnerable to privilege escalation in IAM import API in github.com/minio/minio",
11+
"details": "MinIO vulnerable to privilege escalation in IAM import API in github.com/minio/minio",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/minio/minio",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0.0.0-20220623162515-580d9db85e04"
24+
},
25+
{
26+
"fixed": "0.0.0-20241213221912-68b004a48f41"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/minio/minio/security/advisories/GHSA-cwq8-g58r-32hg"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55949"
42+
},
43+
{
44+
"type": "FIX",
45+
"url": "https://github.com/minio/minio/commit/580d9db85e04f1b63cc2909af50f0ed08afa965f"
46+
},
47+
{
48+
"type": "FIX",
49+
"url": "https://github.com/minio/minio/commit/f246c9053f9603e610d98439799bdd2a6b293427"
50+
},
51+
{
52+
"type": "FIX",
53+
"url": "https://github.com/minio/minio/pull/20756"
54+
}
55+
],
56+
"database_specific": {
57+
"url": "https://pkg.go.dev/vuln/GO-2024-3336",
58+
"review_status": "UNREVIEWED"
59+
}
60+
}

‎data/osv/GO-2024-3337.json

+121
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,121 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2024-3337",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2024-54083",
8+
"GHSA-69pr-78gv-7c6h"
9+
],
10+
"summary": "Mattermost Improper Validation of Specified Type of Input vulnerability in github.com/mattermost/mattermost-server",
11+
"details": "Mattermost Improper Validation of Specified Type of Input vulnerability in github.com/mattermost/mattermost-server",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/mattermost/mattermost-server",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "9.5.0+incompatible"
24+
},
25+
{
26+
"fixed": "9.5.13+incompatible"
27+
},
28+
{
29+
"introduced": "9.11.0+incompatible"
30+
},
31+
{
32+
"fixed": "9.11.5+incompatible"
33+
},
34+
{
35+
"introduced": "10.0.0+incompatible"
36+
},
37+
{
38+
"fixed": "10.0.3+incompatible"
39+
},
40+
{
41+
"introduced": "10.1.0+incompatible"
42+
},
43+
{
44+
"fixed": "10.1.3+incompatible"
45+
}
46+
]
47+
}
48+
],
49+
"ecosystem_specific": {}
50+
},
51+
{
52+
"package": {
53+
"name": "github.com/mattermost/mattermost-server/v5",
54+
"ecosystem": "Go"
55+
},
56+
"ranges": [
57+
{
58+
"type": "SEMVER",
59+
"events": [
60+
{
61+
"introduced": "0"
62+
}
63+
]
64+
}
65+
],
66+
"ecosystem_specific": {}
67+
},
68+
{
69+
"package": {
70+
"name": "github.com/mattermost/mattermost-server/v6",
71+
"ecosystem": "Go"
72+
},
73+
"ranges": [
74+
{
75+
"type": "SEMVER",
76+
"events": [
77+
{
78+
"introduced": "0"
79+
}
80+
]
81+
}
82+
],
83+
"ecosystem_specific": {}
84+
},
85+
{
86+
"package": {
87+
"name": "github.com/mattermost/mattermost/server/v8",
88+
"ecosystem": "Go"
89+
},
90+
"ranges": [
91+
{
92+
"type": "SEMVER",
93+
"events": [
94+
{
95+
"introduced": "0"
96+
}
97+
]
98+
}
99+
],
100+
"ecosystem_specific": {}
101+
}
102+
],
103+
"references": [
104+
{
105+
"type": "ADVISORY",
106+
"url": "https://github.com/advisories/GHSA-69pr-78gv-7c6h"
107+
},
108+
{
109+
"type": "ADVISORY",
110+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54083"
111+
},
112+
{
113+
"type": "WEB",
114+
"url": "https://mattermost.com/security-updates"
115+
}
116+
],
117+
"database_specific": {
118+
"url": "https://pkg.go.dev/vuln/GO-2024-3337",
119+
"review_status": "UNREVIEWED"
120+
}
121+
}

0 commit comments

Comments
 (0)