Update 20240104092058 (#285)

feat: Updated at 20240104092058

Signed-off-by: bitnami-bot <[email protected]>

data/elasticsearch/BIT-elasticsearch-2023-31417.json

@@ -15,7 +15,7 @@
       "severity": [
         {
           "type": "CVSS_V3",
-          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+          "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
         }
       ],
       "ranges": [
@@ -40,7 +40,7 @@
     }
   ],
   "database_specific": {
-    "severity": "High",
+    "severity": "Medium",
     "cpes": [
       "cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*"
     ]
@@ -60,5 +60,5 @@
     }
   ],
   "published": "2023-11-07T07:17:32.375Z",
-  "modified": "2023-12-01T07:45:35.345Z"
+  "modified": "2024-01-04T09:50:48.793Z"
 }

data/typo3/BIT-typo3-2023-30451.json

@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.5.0",
+  "id": "BIT-typo3-2023-30451",
+  "details": "In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in data[sys_file_storage]*[data][sDEF][lDEF][basePath][vDEF].",
+  "aliases": [
+    "CVE-2023-30451"
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Bitnami",
+        "name": "typo3",
+        "purl": "pkg:bitnami/typo3"
+      },
+      "severity": [
+        {
+          "type": "CVSS_V3",
+          "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
+        }
+      ],
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "11.5.24"
+            },
+            {
+              "last_affected": "11.5.24"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "database_specific": {
+    "severity": "Medium",
+    "cpes": [
+      "cpe:2.3:a:typo3:typo3:11.5.24:*:*:*:*:*:*:*"
+    ]
+  },
+  "references": [
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/176274/TYPO3-11.5.24-Path-Traversal.html"
+    }
+  ],
+  "published": "2024-01-04T09:37:11.700Z",
+  "modified": "2024-01-04T09:50:48.793Z"
+}