generated content from 2025-01-09

CVELab · Jan 9, 2025 · d5e93bf · d5e93bf
1 parent b62ca36
commit d5e93bf
Show file tree

Hide file tree

Showing 40 changed files with 897 additions and 0 deletions.
diff --git a/mapping.csv b/mapping.csv
@@ -262798,3 +262798,42 @@ vulnerability,CVE-2025-22149,vulnerability--8ce9df25-8517-413f-8b9d-6dfe7635752d
 vulnerability,CVE-2024-13237,vulnerability--34a4c6ea-7250-4552-88a9-898985b6524e
 vulnerability,CVE-2025-21598,vulnerability--0b214355-88f5-46c0-bf50-1c9a2b8bc473
 vulnerability,CVE-2025-22151,vulnerability--61d2ea76-1487-4258-83cb-ce95448ba965
+vulnerability,CVE-2024-56114,vulnerability--c14b3610-3a9e-445b-981c-975a0860fdd1
+vulnerability,CVE-2024-56113,vulnerability--13003185-9350-4d8a-b6d6-9c792a43b568
+vulnerability,CVE-2024-55494,vulnerability--75119915-1aee-4669-98df-a4eac83d32ac
+vulnerability,CVE-2024-13256,vulnerability--a8811ff2-299c-4d0e-bbc7-040c7a33c4c7
+vulnerability,CVE-2024-13277,vulnerability--3ac22983-6dbe-4ef0-b2cf-5821cdff90e3
+vulnerability,CVE-2024-13283,vulnerability--01ce57c1-edd1-4e2c-9c7f-e56bc7960c9c
+vulnerability,CVE-2024-13279,vulnerability--1bd0b16a-45a8-4e3d-9254-bfb28b424362
+vulnerability,CVE-2024-13269,vulnerability--9e29789a-4757-4cf4-a1bb-8fd66c15bca6
+vulnerability,CVE-2024-13276,vulnerability--54f56fca-07c3-4bc1-bb53-9fe651fc0976
+vulnerability,CVE-2024-13284,vulnerability--ddffd0a0-d0bc-45c7-8302-2f14fc3b27a2
+vulnerability,CVE-2024-13271,vulnerability--b9ea4c25-c0fa-4951-8cb3-fcf2456dc896
+vulnerability,CVE-2024-13278,vulnerability--3f7a5bb3-7aab-469f-88f2-01686eac6270
+vulnerability,CVE-2024-13262,vulnerability--22fa0152-62ee-40da-9e92-234ab2ee8bef
+vulnerability,CVE-2024-13266,vulnerability--4f6d812a-54ff-4f2b-bf82-4b8b61274ac9
+vulnerability,CVE-2024-13255,vulnerability--7b62ec15-63af-48c2-94c3-9282c28d26ac
+vulnerability,CVE-2024-13273,vulnerability--6317a2d8-a129-4540-ac3b-f7cf9d49655e
+vulnerability,CVE-2024-13272,vulnerability--d0bc1ef4-0e17-403d-ac25-8e1aa109b4b4
+vulnerability,CVE-2024-13267,vulnerability--8cc46bd9-ad08-4652-9b07-b8cff25f35c7
+vulnerability,CVE-2024-13274,vulnerability--7ca1213e-51d3-40f9-a6ab-09e07834be64
+vulnerability,CVE-2024-13270,vulnerability--f370c2cc-9ad3-47ce-b283-9e96a7593d91
+vulnerability,CVE-2024-13260,vulnerability--de9d5340-21d3-49bb-b5d1-dfb9dce9a94f
+vulnerability,CVE-2024-13282,vulnerability--f727560e-c0f6-41bc-bfb2-d7fb123030b2
+vulnerability,CVE-2024-13280,vulnerability--75bb092d-ace0-45c5-b717-d2a97d011e6c
+vulnerability,CVE-2024-13263,vulnerability--8283ac7c-9845-4821-b1d0-f7fdc5bfb011
+vulnerability,CVE-2024-13257,vulnerability--ec2ae14c-eb8a-4db1-b611-84c50ac9fa3a
+vulnerability,CVE-2024-13258,vulnerability--420b8760-4b9a-4123-a9fb-263f7dcbe598
+vulnerability,CVE-2024-13259,vulnerability--4a270d80-09c6-4be2-a751-3f2b80f51249
+vulnerability,CVE-2024-13275,vulnerability--b11c3bd9-89dd-4ae8-b7d4-8a0ca4cd7457
+vulnerability,CVE-2024-13265,vulnerability--946aa161-016b-4737-9538-2ae87e38a9d6
+vulnerability,CVE-2024-13261,vulnerability--a4ef8d21-6477-45f9-9b75-6517b185badb
+vulnerability,CVE-2024-13264,vulnerability--352c0280-ea99-4fe7-a4c1-939389097380
+vulnerability,CVE-2024-13281,vulnerability--fed5c97b-0546-4b70-8cbd-c860a246e023
+vulnerability,CVE-2024-13268,vulnerability--60f2a17b-6bc1-4bfe-805c-a67178fed41b
+vulnerability,CVE-2024-54724,vulnerability--8c4f6153-2fa8-4f44-b403-3f157c9ba458
+vulnerability,CVE-2024-54761,vulnerability--783d1d21-e794-4c21-bb96-4a044eac89ae
+vulnerability,CVE-2024-54887,vulnerability--db6f47e0-ea76-43e1-8b86-85e5d5cd8c0e
+vulnerability,CVE-2024-54762,vulnerability--3c7377b8-b6f3-4d9e-ab5d-dc79b02eb8a3
+vulnerability,CVE-2024-10215,vulnerability--d0fc6524-8e19-4628-b87c-52392194fa67
+vulnerability,CVE-2024-46505,vulnerability--6170e2aa-ae29-4b21-b4cb-be59b082e954
diff --git a/objects/vulnerability/vulnerability--01ce57c1-edd1-4e2c-9c7f-e56bc7960c9c.json b/objects/vulnerability/vulnerability--01ce57c1-edd1-4e2c-9c7f-e56bc7960c9c.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--dcc8f0ea-2fa4-4347-817c-3823b285e119",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--01ce57c1-edd1-4e2c-9c7f-e56bc7960c9c",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.877245Z",
+            "modified": "2025-01-09T20:21:17.877245Z",
+            "name": "CVE-2024-13283",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Facets allows Cross-Site Scripting (XSS).This issue affects Facets: from 0.0.0 before 2.0.9.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13283"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--13003185-9350-4d8a-b6d6-9c792a43b568.json b/objects/vulnerability/vulnerability--13003185-9350-4d8a-b6d6-9c792a43b568.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--38621332-9699-44c4-a0d7-b7a4d5213b6c",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--13003185-9350-4d8a-b6d6-9c792a43b568",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:16.258505Z",
+            "modified": "2025-01-09T20:21:16.258505Z",
+            "name": "CVE-2024-56113",
+            "description": "Smart Toilet Lab - Motius 1.3.11 is running with debug mode turned on (DEBUG = True) and exposing sensitive information defined in Django settings file through verbose error page.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-56113"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--1bd0b16a-45a8-4e3d-9254-bfb28b424362.json b/objects/vulnerability/vulnerability--1bd0b16a-45a8-4e3d-9254-bfb28b424362.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--8af3d8d4-2126-4a39-aaee-3a0f8482a97e",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--1bd0b16a-45a8-4e3d-9254-bfb28b424362",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.878639Z",
+            "modified": "2025-01-09T20:21:17.878639Z",
+            "name": "CVE-2024-13279",
+            "description": "Session Fixation vulnerability in Drupal Two-factor Authentication (TFA) allows Session Fixation.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.8.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13279"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--22fa0152-62ee-40da-9e92-234ab2ee8bef.json b/objects/vulnerability/vulnerability--22fa0152-62ee-40da-9e92-234ab2ee8bef.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--69d740f7-06d1-4cba-94d3-0a676e357192",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--22fa0152-62ee-40da-9e92-234ab2ee8bef",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.886202Z",
+            "modified": "2025-01-09T20:21:17.886202Z",
+            "name": "CVE-2024-13262",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal View Password allows Cross-Site Scripting (XSS).This issue affects View Password: from 0.0.0 before 6.0.4.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13262"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--352c0280-ea99-4fe7-a4c1-939389097380.json b/objects/vulnerability/vulnerability--352c0280-ea99-4fe7-a4c1-939389097380.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--08878f35-b004-45be-a397-a13fb8d5d123",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--352c0280-ea99-4fe7-a4c1-939389097380",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.91261Z",
+            "modified": "2025-01-09T20:21:17.91261Z",
+            "name": "CVE-2024-13264",
+            "description": "Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno module allows PHP Local File Inclusion.This issue affects Opigno module: from 0.0.0 before 3.1.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13264"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--3ac22983-6dbe-4ef0-b2cf-5821cdff90e3.json b/objects/vulnerability/vulnerability--3ac22983-6dbe-4ef0-b2cf-5821cdff90e3.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--5453c024-3135-4c32-ac04-71e0b8aafbe1",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--3ac22983-6dbe-4ef0-b2cf-5821cdff90e3",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.875919Z",
+            "modified": "2025-01-09T20:21:17.875919Z",
+            "name": "CVE-2024-13277",
+            "description": "Incorrect Authorization vulnerability in Drupal Smart IP Ban allows Forceful Browsing.This issue affects Smart IP Ban: from 7.X-1.0 before 7.X-1.1.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13277"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--3c7377b8-b6f3-4d9e-ab5d-dc79b02eb8a3.json b/objects/vulnerability/vulnerability--3c7377b8-b6f3-4d9e-ab5d-dc79b02eb8a3.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--0dceb966-2ec0-4ef0-a957-11824363b8ce",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--3c7377b8-b6f3-4d9e-ab5d-dc79b02eb8a3",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:18.002893Z",
+            "modified": "2025-01-09T20:21:18.002893Z",
+            "name": "CVE-2024-54762",
+            "description": "Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQL injection.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54762"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--3f7a5bb3-7aab-469f-88f2-01686eac6270.json b/objects/vulnerability/vulnerability--3f7a5bb3-7aab-469f-88f2-01686eac6270.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--bf2d2781-c872-4af0-a089-66f63cdd0fc6",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--3f7a5bb3-7aab-469f-88f2-01686eac6270",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.885061Z",
+            "modified": "2025-01-09T20:21:17.885061Z",
+            "name": "CVE-2024-13278",
+            "description": "Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13278"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--420b8760-4b9a-4123-a9fb-263f7dcbe598.json b/objects/vulnerability/vulnerability--420b8760-4b9a-4123-a9fb-263f7dcbe598.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--2de7c61d-233a-4102-8d9a-2bf5ad6f2f59",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--420b8760-4b9a-4123-a9fb-263f7dcbe598",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.904325Z",
+            "modified": "2025-01-09T20:21:17.904325Z",
+            "name": "CVE-2024-13258",
+            "description": "Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13258"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--4a270d80-09c6-4be2-a751-3f2b80f51249.json b/objects/vulnerability/vulnerability--4a270d80-09c6-4be2-a751-3f2b80f51249.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--d1e6a1c1-9457-4823-8266-9ba04564ec38",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--4a270d80-09c6-4be2-a751-3f2b80f51249",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.905886Z",
+            "modified": "2025-01-09T20:21:17.905886Z",
+            "name": "CVE-2024-13259",
+            "description": "Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13259"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--4f6d812a-54ff-4f2b-bf82-4b8b61274ac9.json b/objects/vulnerability/vulnerability--4f6d812a-54ff-4f2b-bf82-4b8b61274ac9.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--b2100c50-7e61-4faa-a444-5f5624a47f4b",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--4f6d812a-54ff-4f2b-bf82-4b8b61274ac9",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.887657Z",
+            "modified": "2025-01-09T20:21:17.887657Z",
+            "name": "CVE-2024-13266",
+            "description": "Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13266"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--54f56fca-07c3-4bc1-bb53-9fe651fc0976.json b/objects/vulnerability/vulnerability--54f56fca-07c3-4bc1-bb53-9fe651fc0976.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--4ed74885-6bfc-4fa9-ab1f-c2d00accfba5",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--54f56fca-07c3-4bc1-bb53-9fe651fc0976",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.880914Z",
+            "modified": "2025-01-09T20:21:17.880914Z",
+            "name": "CVE-2024-13276",
+            "description": "Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity (fieldable files) allows Forceful Browsing.This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.39.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13276"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--60f2a17b-6bc1-4bfe-805c-a67178fed41b.json b/objects/vulnerability/vulnerability--60f2a17b-6bc1-4bfe-805c-a67178fed41b.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--48362246-5faf-493b-96b2-a4775faa97f3",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--60f2a17b-6bc1-4bfe-805c-a67178fed41b",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:17.915566Z",
+            "modified": "2025-01-09T20:21:17.915566Z",
+            "name": "CVE-2024-13268",
+            "description": "Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno allows PHP Local File Inclusion.This issue affects Opigno: from 7.X-1.0 before 7.X-1.23.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-13268"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--6170e2aa-ae29-4b21-b4cb-be59b082e954.json b/objects/vulnerability/vulnerability--6170e2aa-ae29-4b21-b4cb-be59b082e954.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--c429d508-ffe5-426a-9536-5328b9b1105e",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--6170e2aa-ae29-4b21-b4cb-be59b082e954",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T20:21:18.319228Z",
+            "modified": "2025-01-09T20:21:18.319228Z",
+            "name": "CVE-2024-46505",
+            "description": "Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-46505"
+                }
+            ]
+        }
+    ]
+}