diff --git a/cves/2024/11xxx/CVE-2024-11846.json b/cves/2024/11xxx/CVE-2024-11846.json new file mode 100644 index 000000000000..f1d3ab5c52b4 --- /dev/null +++ b/cves/2024/11xxx/CVE-2024-11846.json @@ -0,0 +1,83 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.1", + "cveMetadata": { + "cveId": "CVE-2024-11846", + "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "state": "PUBLISHED", + "assignerShortName": "WPScan", + "dateReserved": "2024-11-26T20:35:24.978Z", + "datePublished": "2025-01-01T06:00:08.702Z", + "dateUpdated": "2025-01-01T06:00:08.702Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", + "shortName": "WPScan", + "dateUpdated": "2025-01-01T06:00:08.702Z" + }, + "title": "Travel Tour < 5.2.4 - Reflected XSS", + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79 Cross-Site Scripting (XSS)", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "affected": [ + { + "vendor": "Unknown", + "product": "TravelTour", + "versions": [ + { + "status": "affected", + "versionType": "semver", + "version": "0", + "lessThan": "5.2.4" + } + ], + "defaultStatus": "unaffected" + } + ], + "descriptions": [ + { + "lang": "en", + "value": "The does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin" + } + ], + "references": [ + { + "url": "https://wpscan.com/vulnerability/eedaf2d8-171c-4785-99cc-ab33113308d1/", + "tags": [ + "exploit", + "vdb-entry", + "technical-description" + ] + } + ], + "credits": [ + { + "lang": "en", + "value": "Amine SAJID", + "type": "finder" + }, + { + "lang": "en", + "value": "WPScan", + "type": "coordinator" + } + ], + "source": { + "discovery": "EXTERNAL" + }, + "x_generator": { + "engine": "WPScan CVE Generator" + } + } + } +} \ No newline at end of file diff --git a/cves/delta.json b/cves/delta.json index 33ee195345d4..cec21d20ea97 100644 --- a/cves/delta.json +++ b/cves/delta.json @@ -1,32 +1,14 @@ { - "fetchTime": "2025-01-01T05:01:09.354Z", - "numberOfChanges": 4, - "new": [], - "updated": [ - { - "cveId": "CVE-2024-12751", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-12751", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/12xxx/CVE-2024-12751.json", - "dateUpdated": "2025-01-01T04:56:28.195Z" - }, - { - "cveId": "CVE-2024-12752", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-12752", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/12xxx/CVE-2024-12752.json", - "dateUpdated": "2025-01-01T04:56:26.938Z" - }, - { - "cveId": "CVE-2024-12753", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-12753", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/12xxx/CVE-2024-12753.json", - "dateUpdated": "2025-01-01T04:56:25.458Z" - }, - { - "cveId": "CVE-2024-56337", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-56337", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56337.json", - "dateUpdated": "2025-01-01T04:56:29.394Z" + "fetchTime": "2025-01-01T06:01:38.857Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2024-11846", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-11846", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11846.json", + "dateUpdated": "2025-01-01T06:00:08.702Z" } ], + "updated": [], "error": [] } \ No newline at end of file diff --git a/cves/deltaLog.json b/cves/deltaLog.json index ada202ad33e7..80da4f75f4e9 100644 --- a/cves/deltaLog.json +++ b/cves/deltaLog.json @@ -1,4 +1,18 @@ [ + { + "fetchTime": "2025-01-01T06:01:38.857Z", + "numberOfChanges": 1, + "new": [ + { + "cveId": "CVE-2024-11846", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-11846", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11846.json", + "dateUpdated": "2025-01-01T06:00:08.702Z" + } + ], + "updated": [], + "error": [] + }, { "fetchTime": "2025-01-01T05:01:09.354Z", "numberOfChanges": 4,