diff --git a/advisories/unreviewed/2024/11/GHSA-3q4w-rf2j-fx5x/GHSA-3q4w-rf2j-fx5x.json b/advisories/unreviewed/2024/11/GHSA-3q4w-rf2j-fx5x/GHSA-3q4w-rf2j-fx5x.json index 03ab9be7f590d..e8c57300f0743 100644 --- a/advisories/unreviewed/2024/11/GHSA-3q4w-rf2j-fx5x/GHSA-3q4w-rf2j-fx5x.json +++ b/advisories/unreviewed/2024/11/GHSA-3q4w-rf2j-fx5x/GHSA-3q4w-rf2j-fx5x.json @@ -1,26 +1,49 @@ { "schema_version": "1.4.0", "id": "GHSA-3q4w-rf2j-fx5x", - "modified": "2024-11-06T09:31:22Z", + "modified": "2024-11-06T09:31:32Z", "published": "2024-11-06T09:31:21Z", "aliases": [ "CVE-2024-52043" ], + "summary": "Humhub User Enumeration Vulnerability", "details": "Observable Response Discrepancy vulnerability in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.", "severity": [ { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "None" + } + ] + } + ] + } ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52043" }, + { + "type": "PACKAGE", + "url": "https://github.com/humhub/humhub" + }, { "type": "WEB", "url": "https://github.com/humhub/humhub/security"