1 changes (1 new | 0 updated):

- 1 new CVEs: CVE-2024-21663 - 0 updated CVEs:
CVEProject · Jan 8, 2024 · b30e677 · b30e677
1 parent ce88821
commit b30e677
Show file tree

Hide file tree

Showing 3 changed files with 119 additions and 7 deletions.
diff --git a/cves/2024/21xxx/CVE-2024-21663.json b/cves/2024/21xxx/CVE-2024-21663.json
@@ -0,0 +1,98 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.0",
+    "cveMetadata": {
+        "cveId": "CVE-2024-21663",
+        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
+        "state": "PUBLISHED",
+        "assignerShortName": "GitHub_M",
+        "dateReserved": "2023-12-29T16:10:20.367Z",
+        "datePublished": "2024-01-08T23:57:54.897Z",
+        "dateUpdated": "2024-01-08T23:57:54.897Z"
+    },
+    "containers": {
+        "cna": {
+            "title": "Remote code execution on ReconServer due to improper input sanitization on the prips command",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "cweId": "CWE-20",
+                            "lang": "en",
+                            "description": "CWE-20: Improper Input Validation",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "metrics": [
+                {
+                    "cvssV3_1": {
+                        "attackComplexity": "LOW",
+                        "attackVector": "NETWORK",
+                        "availabilityImpact": "HIGH",
+                        "baseScore": 10,
+                        "baseSeverity": "CRITICAL",
+                        "confidentialityImpact": "HIGH",
+                        "integrityImpact": "HIGH",
+                        "privilegesRequired": "LOW",
+                        "scope": "CHANGED",
+                        "userInteraction": "NONE",
+                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+                        "version": "3.1"
+                    }
+                }
+            ],
+            "references": [
+                {
+                    "name": "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-fjcj-g7x8-4rp7",
+                    "tags": [
+                        "x_refsource_CONFIRM"
+                    ],
+                    "url": "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-fjcj-g7x8-4rp7"
+                },
+                {
+                    "name": "https://github.com/DEMON1A/Discord-Recon/issues/23",
+                    "tags": [
+                        "x_refsource_MISC"
+                    ],
+                    "url": "https://github.com/DEMON1A/Discord-Recon/issues/23"
+                },
+                {
+                    "name": "https://github.com/DEMON1A/Discord-Recon/commit/f9cb0f67177f5e2f1022295ca8e641e47837ec7a",
+                    "tags": [
+                        "x_refsource_MISC"
+                    ],
+                    "url": "https://github.com/DEMON1A/Discord-Recon/commit/f9cb0f67177f5e2f1022295ca8e641e47837ec7a"
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "DEMON1A",
+                    "product": "Discord-Recon",
+                    "versions": [
+                        {
+                            "version": "< 0.0.8",
+                            "status": "affected"
+                        }
+                    ]
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
+                "shortName": "GitHub_M",
+                "dateUpdated": "2024-01-08T23:57:54.897Z"
+            },
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "Discord-Recon is a Discord bot created to automate bug bounty recon, automated scans and information gathering via a discord server. Discord-Recon is vulnerable to remote code execution. An attacker is able to execute shell commands in the server without having an admin role. This vulnerability has been fixed in version 0.0.8.\n"
+                }
+            ],
+            "source": {
+                "advisory": "GHSA-fjcj-g7x8-4rp7",
+                "discovery": "UNKNOWN"
+            }
+        }
+    }
+}
diff --git a/cves/delta.json b/cves/delta.json
@@ -1,14 +1,14 @@
 {
-  "fetchTime": "2024-01-08T23:52:59.343Z",
+  "fetchTime": "2024-01-08T23:58:36.650Z",
   "numberOfChanges": 1,
-  "new": [],
-  "updated": [
+  "new": [
     {
-      "cveId": "CVE-2023-28476",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2023-28476",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/28xxx/CVE-2023-28476.json",
-      "dateUpdated": "2024-01-08T23:49:09.362123"
+      "cveId": "CVE-2024-21663",
+      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-21663",
+      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21663.json",
+      "dateUpdated": "2024-01-08T23:57:54.897Z"
     }
   ],
+  "updated": [],
   "error": []
 }
diff --git a/cves/deltaLog.json b/cves/deltaLog.json
@@ -1,4 +1,18 @@
 [
+  {
+    "fetchTime": "2024-01-08T23:58:36.650Z",
+    "numberOfChanges": 1,
+    "new": [
+      {
+        "cveId": "CVE-2024-21663",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-21663",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/21xxx/CVE-2024-21663.json",
+        "dateUpdated": "2024-01-08T23:57:54.897Z"
+      }
+    ],
+    "updated": [],
+    "error": []
+  },
   {
     "fetchTime": "2024-01-08T23:52:59.343Z",
     "numberOfChanges": 1,