-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
41fa4ed
commit 8d1f120
Showing
2 changed files
with
5 additions
and
5 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1 +1 @@ | ||
| {"cve": {"id": "CVE-2024-50623", "sourceIdentifier": "cve@mitre.org", "published": "2024-10-28T00:15:03.657", "lastModified": "2024-12-20T15:04:26.097", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution."}, {"lang": "es", "value": "En Cleo Harmony anterior a 5.8.0.20, VLTrader anterior a 5.8.0.20 y LexiCom anterior a 5.8.0.20, hay una vulnerabilidad de inyecci\u00f3n de JavaScript."}], "metrics": {"cvssMetricV31": [{"source": "nvd@nist.gov", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}]}, "cisaExploitAdd": "2024-12-13", "cisaActionDue": "2025-01-03", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Cleo Multiple Products Unrestricted File Upload Vulnerability", "weaknesses": [{"source": "nvd@nist.gov", "type": "Primary", "description": [{"lang": "en", "value": "CWE-434"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-434"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:cleo:harmony:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.8.0.21", "matchCriteriaId": "829892E7-DFA5-4153-A1B0-D2C64054ED9F"}, {"vulnerable": true, "criteria": "cpe:2.3:a:cleo:lexicom:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.8.0.21", "matchCriteriaId": "EA757293-8537-4DCE-BC91-E2D4A5CB08B3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:cleo:vltrader:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.8.0.21", "matchCriteriaId": "01120D67-ED19-4B22-9484-A39715E02058"}]}]}], "references": [{"url": "https://support.cleo.com/hc/en-us/articles/27140294267799-Cleo-Product-Security-Advisory", "source": "cve@mitre.org", "tags": ["Vendor Advisory"]}]}} | ||
| {"cve": {"id": "CVE-2024-50623", "sourceIdentifier": "cve@mitre.org", "published": "2024-10-28T00:15:03.657", "lastModified": "2024-12-23T06:15:06.357", "vulnStatus": "Modified", "cveTags": [], "descriptions": [{"lang": "en", "value": "In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution."}, {"lang": "es", "value": "En Cleo Harmony anterior a 5.8.0.20, VLTrader anterior a 5.8.0.20 y LexiCom anterior a 5.8.0.20, hay una vulnerabilidad de inyecci\u00f3n de JavaScript."}], "metrics": {"cvssMetricV31": [{"source": "nvd@nist.gov", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}]}, "cisaExploitAdd": "2024-12-13", "cisaActionDue": "2025-01-03", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Cleo Multiple Products Unrestricted File Upload Vulnerability", "weaknesses": [{"source": "cve@mitre.org", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-434"}]}, {"source": "nvd@nist.gov", "type": "Primary", "description": [{"lang": "en", "value": "CWE-434"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-434"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:cleo:harmony:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.8.0.21", "matchCriteriaId": "829892E7-DFA5-4153-A1B0-D2C64054ED9F"}, {"vulnerable": true, "criteria": "cpe:2.3:a:cleo:lexicom:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.8.0.21", "matchCriteriaId": "EA757293-8537-4DCE-BC91-E2D4A5CB08B3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:cleo:vltrader:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.8.0.21", "matchCriteriaId": "01120D67-ED19-4B22-9484-A39715E02058"}]}]}], "references": [{"url": "https://support.cleo.com/hc/en-us/articles/27140294267799-Cleo-Product-Security-Advisory", "source": "cve@mitre.org", "tags": ["Vendor Advisory"]}]}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,10 +1,10 @@ | ||
| { | ||
| "vulnerabilities": { | ||
| "lastModStartDate": "2024-12-23T04:02:57.873", | ||
| "lastModEndDate": "2024-12-23T06:03:17.390" | ||
| "lastModStartDate": "2024-12-23T06:03:17.390", | ||
| "lastModEndDate": "2024-12-23T08:03:07.313" | ||
| }, | ||
| "matchStrings": { | ||
| "lastModStartDate": "2024-12-23T04:02:52.830", | ||
| "lastModEndDate": "2024-12-23T06:03:17.017" | ||
| "lastModStartDate": "2024-12-23T06:03:17.017", | ||
| "lastModEndDate": "2024-12-23T08:02:59.853" | ||
| } | ||
| } |