🤖 NVD update at 2025-01-06T03:00:04+0000

eslerm · Jan 6, 2025 · 0846911 · 0846911
1 parent c23c4ef
commit 0846911
Showing 1 changed file with 145 additions and 0 deletions.
diff --git a/2024/CVE-2024-13145.json b/2024/CVE-2024-13145.json
@@ -0,0 +1,145 @@
+{
+    "id": "CVE-2024-13145",
+    "sourceIdentifier": "[email protected]",
+    "published": "2025-01-06T01:15:06.253",
+    "lastModified": "2025-01-06T01:15:06.253",
+    "vulnStatus": "Received",
+    "cveTags": [],
+    "descriptions": [
+        {
+            "lang": "en",
+            "value": "A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
+        }
+    ],
+    "metrics": {
+        "cvssMetricV40": [
+            {
+                "source": "[email protected]",
+                "type": "Secondary",
+                "cvssData": {
+                    "version": "4.0",
+                    "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+                    "baseScore": 5.3,
+                    "baseSeverity": "MEDIUM",
+                    "attackVector": "NETWORK",
+                    "attackComplexity": "LOW",
+                    "attackRequirements": "NONE",
+                    "privilegesRequired": "LOW",
+                    "userInteraction": "NONE",
+                    "vulnerableSystemConfidentiality": "LOW",
+                    "vulnerableSystemIntegrity": "LOW",
+                    "vulnerableSystemAvailability": "LOW",
+                    "subsequentSystemConfidentiality": "NONE",
+                    "subsequentSystemIntegrity": "NONE",
+                    "subsequentSystemAvailability": "NONE",
+                    "exploitMaturity": "NOT_DEFINED",
+                    "confidentialityRequirements": "NOT_DEFINED",
+                    "integrityRequirements": "NOT_DEFINED",
+                    "availabilityRequirements": "NOT_DEFINED",
+                    "modifiedAttackVector": "NOT_DEFINED",
+                    "modifiedAttackComplexity": "NOT_DEFINED",
+                    "modifiedAttackRequirements": "NOT_DEFINED",
+                    "modifiedPrivilegesRequired": "NOT_DEFINED",
+                    "modifiedUserInteraction": "NOT_DEFINED",
+                    "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED",
+                    "modifiedVulnerableSystemIntegrity": "NOT_DEFINED",
+                    "modifiedVulnerableSystemAvailability": "NOT_DEFINED",
+                    "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED",
+                    "modifiedSubsequentSystemIntegrity": "NOT_DEFINED",
+                    "modifiedSubsequentSystemAvailability": "NOT_DEFINED",
+                    "safety": "NOT_DEFINED",
+                    "automatable": "NOT_DEFINED",
+                    "recovery": "NOT_DEFINED",
+                    "valueDensity": "NOT_DEFINED",
+                    "vulnerabilityResponseEffort": "NOT_DEFINED",
+                    "providerUrgency": "NOT_DEFINED"
+                }
+            }
+        ],
+        "cvssMetricV31": [
+            {
+                "source": "[email protected]",
+                "type": "Secondary",
+                "cvssData": {
+                    "version": "3.1",
+                    "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+                    "baseScore": 6.3,
+                    "baseSeverity": "MEDIUM",
+                    "attackVector": "NETWORK",
+                    "attackComplexity": "LOW",
+                    "privilegesRequired": "LOW",
+                    "userInteraction": "NONE",
+                    "scope": "UNCHANGED",
+                    "confidentialityImpact": "LOW",
+                    "integrityImpact": "LOW",
+                    "availabilityImpact": "LOW"
+                },
+                "exploitabilityScore": 2.8,
+                "impactScore": 3.4
+            }
+        ],
+        "cvssMetricV2": [
+            {
+                "source": "[email protected]",
+                "type": "Secondary",
+                "cvssData": {
+                    "version": "2.0",
+                    "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
+                    "baseScore": 6.5,
+                    "accessVector": "NETWORK",
+                    "accessComplexity": "LOW",
+                    "authentication": "SINGLE",
+                    "confidentialityImpact": "PARTIAL",
+                    "integrityImpact": "PARTIAL",
+                    "availabilityImpact": "PARTIAL"
+                },
+                "baseSeverity": "MEDIUM",
+                "exploitabilityScore": 8.0,
+                "impactScore": 6.4,
+                "acInsufInfo": false,
+                "obtainAllPrivilege": false,
+                "obtainUserPrivilege": false,
+                "obtainOtherPrivilege": false,
+                "userInteractionRequired": false
+            }
+        ]
+    },
+    "weaknesses": [
+        {
+            "source": "[email protected]",
+            "type": "Primary",
+            "description": [
+                {
+                    "lang": "en",
+                    "value": "CWE-284"
+                },
+                {
+                    "lang": "en",
+                    "value": "CWE-434"
+                }
+            ]
+        }
+    ],
+    "references": [
+        {
+            "url": "https://github.com/ZHENFENG13/My-Blog/issues/141",
+            "source": "[email protected]"
+        },
+        {
+            "url": "https://github.com/ZHENFENG13/My-Blog/issues/141#issue-2759820153",
+            "source": "[email protected]"
+        },
+        {
+            "url": "https://vuldb.com/?ctiid.290233",
+            "source": "[email protected]"
+        },
+        {
+            "url": "https://vuldb.com/?id.290233",
+            "source": "[email protected]"
+        },
+        {
+            "url": "https://vuldb.com/?submit.469221",
+            "source": "[email protected]"
+        }
+    ]
+}