-
Notifications
You must be signed in to change notification settings - Fork 210
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- 3 new CVEs: CVE-2023-47657, CVE-2023-5977, CVE-2023-6010 - 0 updated CVEs:
- Loading branch information
cvelistV5 Github Action
committed
Nov 13, 2023
1 parent
6c71502
commit 53d9ab2
Showing
5 changed files
with
238 additions
and
44 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,142 @@ | ||
| { | ||
| "dataType": "CVE_RECORD", | ||
| "dataVersion": "5.0", | ||
| "cveMetadata": { | ||
| "cveId": "CVE-2023-47657", | ||
| "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", | ||
| "state": "PUBLISHED", | ||
| "assignerShortName": "Patchstack", | ||
| "dateReserved": "2023-11-07T17:36:32.258Z", | ||
| "datePublished": "2023-11-13T23:43:01.797Z", | ||
| "dateUpdated": "2023-11-13T23:43:01.797Z" | ||
| }, | ||
| "containers": { | ||
| "cna": { | ||
| "affected": [ | ||
| { | ||
| "collectionURL": "https://wordpress.org/plugins", | ||
| "defaultStatus": "unaffected", | ||
| "packageName": "quick-view-and-buy-now-for-woocommerce", | ||
| "product": "Direct Checkout – Quick View – Buy Now For WooCommerce", | ||
| "vendor": "GrandPlugins", | ||
| "versions": [ | ||
| { | ||
| "changes": [ | ||
| { | ||
| "at": "1.5.9", | ||
| "status": "unaffected" | ||
| } | ||
| ], | ||
| "lessThanOrEqual": "1.5.8", | ||
| "status": "affected", | ||
| "version": "n/a", | ||
| "versionType": "custom" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "credits": [ | ||
| { | ||
| "lang": "en", | ||
| "type": "finder", | ||
| "user": "00000000-0000-4000-9000-000000000000", | ||
| "value": "Emili Castells (Patchstack Alliance)" | ||
| } | ||
| ], | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "supportingMedia": [ | ||
| { | ||
| "base64": false, | ||
| "type": "text/html", | ||
| "value": "Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin <=<span style=\"background-color: var(--wht);\"> 1.5.8 versions.</span>" | ||
| } | ||
| ], | ||
| "value": "Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin <= 1.5.8 versions." | ||
| } | ||
| ], | ||
| "impacts": [ | ||
| { | ||
| "capecId": "CAPEC-592", | ||
| "descriptions": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "CAPEC-592 Stored XSS" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "metrics": [ | ||
| { | ||
| "cvssV3_1": { | ||
| "attackComplexity": "LOW", | ||
| "attackVector": "NETWORK", | ||
| "availabilityImpact": "LOW", | ||
| "baseScore": 5.9, | ||
| "baseSeverity": "MEDIUM", | ||
| "confidentialityImpact": "LOW", | ||
| "integrityImpact": "LOW", | ||
| "privilegesRequired": "HIGH", | ||
| "scope": "CHANGED", | ||
| "userInteraction": "REQUIRED", | ||
| "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", | ||
| "version": "3.1" | ||
| }, | ||
| "format": "CVSS", | ||
| "scenarios": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "GENERAL" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "problemTypes": [ | ||
| { | ||
| "descriptions": [ | ||
| { | ||
| "cweId": "CWE-79", | ||
| "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", | ||
| "lang": "en", | ||
| "type": "CWE" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "providerMetadata": { | ||
| "orgId": "21595511-bba5-4825-b968-b78d1f9984a3", | ||
| "shortName": "Patchstack", | ||
| "dateUpdated": "2023-11-13T23:43:01.797Z" | ||
| }, | ||
| "references": [ | ||
| { | ||
| "tags": [ | ||
| "vdb-entry" | ||
| ], | ||
| "url": "https://patchstack.com/database/vulnerability/quick-view-and-buy-now-for-woocommerce/wordpress-direct-checkout-quick-view-buy-now-for-woocommerce-plugin-1-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve" | ||
| } | ||
| ], | ||
| "solutions": [ | ||
| { | ||
| "lang": "en", | ||
| "supportingMedia": [ | ||
| { | ||
| "base64": false, | ||
| "type": "text/html", | ||
| "value": "Update to 1.5.9 or a higher version." | ||
| } | ||
| ], | ||
| "value": "Update to 1.5.9 or a higher version." | ||
| } | ||
| ], | ||
| "source": { | ||
| "discovery": "EXTERNAL" | ||
| }, | ||
| "title": "WordPress Direct Checkout – Quick View – Buy Now For WooCommerce Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)", | ||
| "x_generator": { | ||
| "engine": "Vulnogram 0.1.0-dev" | ||
| } | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| { | ||
| "dataType": "CVE_RECORD", | ||
| "dataVersion": "5.0", | ||
| "cveMetadata": { | ||
| "cveId": "CVE-2023-5977", | ||
| "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", | ||
| "state": "REJECTED", | ||
| "dateReserved": "2023-11-07T00:15:54.215Z", | ||
| "dateUpdated": "2023-11-13T23:42:23.793Z", | ||
| "dateRejected": "2023-11-13T23:42:23.793Z", | ||
| "assignerShortName": "Wordfence" | ||
| }, | ||
| "containers": { | ||
| "cna": { | ||
| "providerMetadata": { | ||
| "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", | ||
| "shortName": "Wordfence", | ||
| "dateUpdated": "2023-11-13T23:42:23.793Z" | ||
| }, | ||
| "rejectedReasons": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "Accidental Request." | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| { | ||
| "dataType": "CVE_RECORD", | ||
| "dataVersion": "5.0", | ||
| "cveMetadata": { | ||
| "cveId": "CVE-2023-6010", | ||
| "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", | ||
| "state": "REJECTED", | ||
| "dateReserved": "2023-11-08T05:44:55.728Z", | ||
| "dateUpdated": "2023-11-13T23:40:24.212Z", | ||
| "dateRejected": "2023-11-13T23:40:24.212Z", | ||
| "assignerShortName": "Wordfence" | ||
| }, | ||
| "containers": { | ||
| "cna": { | ||
| "providerMetadata": { | ||
| "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", | ||
| "shortName": "Wordfence", | ||
| "dateUpdated": "2023-11-13T23:40:24.212Z" | ||
| }, | ||
| "rejectedReasons": [ | ||
| { | ||
| "lang": "en", | ||
| "value": "Accidental Request." | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters