Skip to content

Commit 9ee9d90

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-4wpm-qvg3-wvjj GHSA-55xg-g89g-mxwj GHSA-573x-h396-vgr7 GHSA-7m5m-789w-r328 GHSA-q765-jvvr-jmgw
1 parent a0d4009 commit 9ee9d90

File tree

5 files changed

+240
-0
lines changed

5 files changed

+240
-0
lines changed

‎advisories/unreviewed/2025/05/GHSA-4wpm-qvg3-wvjj/GHSA-4wpm-qvg3-wvjj.json

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4wpm-qvg3-wvjj",
4+
"modified": "2025-05-31T18:30:33Z",
5+
"published": "2025-05-31T18:30:33Z",
6+
"aliases": [
7+
"CVE-2025-5384"
8+
],
9+
"details": "A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5384"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.310677"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.310677"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-74"
42+
],
43+
"severity": "MODERATE",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2025-05-31T16:15:19Z"
47+
}
48+
}

‎advisories/unreviewed/2025/05/GHSA-55xg-g89g-mxwj/GHSA-55xg-g89g-mxwj.json

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-55xg-g89g-mxwj",
4+
"modified": "2025-05-31T18:30:34Z",
5+
"published": "2025-05-31T18:30:34Z",
6+
"aliases": [
7+
"CVE-2025-5388"
8+
],
9+
"details": "A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5388"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.310681"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.310681"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-74"
42+
],
43+
"severity": "MODERATE",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2025-05-31T18:15:21Z"
47+
}
48+
}

‎advisories/unreviewed/2025/05/GHSA-573x-h396-vgr7/GHSA-573x-h396-vgr7.json

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-573x-h396-vgr7",
4+
"modified": "2025-05-31T18:30:33Z",
5+
"published": "2025-05-31T18:30:33Z",
6+
"aliases": [
7+
"CVE-2025-5386"
8+
],
9+
"details": "A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5386"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.310679"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.310679"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-74"
42+
],
43+
"severity": "MODERATE",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2025-05-31T17:15:21Z"
47+
}
48+
}

‎advisories/unreviewed/2025/05/GHSA-7m5m-789w-r328/GHSA-7m5m-789w-r328.json

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7m5m-789w-r328",
4+
"modified": "2025-05-31T18:30:33Z",
5+
"published": "2025-05-31T18:30:33Z",
6+
"aliases": [
7+
"CVE-2025-5387"
8+
],
9+
"details": "A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5387"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.310680"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.310680"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-266"
42+
],
43+
"severity": "MODERATE",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2025-05-31T18:15:20Z"
47+
}
48+
}

‎advisories/unreviewed/2025/05/GHSA-q765-jvvr-jmgw/GHSA-q765-jvvr-jmgw.json

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-q765-jvvr-jmgw",
4+
"modified": "2025-05-31T18:30:33Z",
5+
"published": "2025-05-31T18:30:33Z",
6+
"aliases": [
7+
"CVE-2025-5385"
8+
],
9+
"details": "A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5385"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNV"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.310678"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.310678"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-22"
42+
],
43+
"severity": "MODERATE",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2025-05-31T17:15:20Z"
47+
}
48+
}

0 commit comments

Comments
 (0)