{"id":"GHSA-qfv2-3p2f-vg48","summary":"Duplicate Advisory: Central Dogma Authentication Bypass Vulnerability via Session Leakage","details":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-34q3-p352-c7q8. This link is maintained to preserve external references.\n\n## Original Description\nCentral Dogma versions prior to 0.64.0 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent authentication bypass.","modified":"2024-11-28T05:50:06.898670Z","published":"2024-02-02T06:30:32Z","withdrawn":"2024-02-02T16:55:20Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2024-02-02T16:55:20Z","nvd_published_at":"2024-02-02T06:15:45Z","cwe_ids":[],"severity":"MODERATE"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1143"},{"type":"WEB","url":"https://github.com/line/centraldogma/commit/8edcf913b88101aff70008156b0881850e005783"}],"affected":[{"package":{"name":"com.linecorp.centraldogma:centraldogma-server","ecosystem":"Maven","purl":"pkg:maven/com.linecorp.centraldogma/centraldogma-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.64.0"}]}],"versions":["0.17.0","0.18.0","0.19.0","0.20.0","0.20.1","0.21.0","0.21.1","0.22.0","0.23.0","0.24.0","0.25.0","0.26.0","0.27.0","0.28.0","0.28.1","0.29.0","0.30.0","0.31.0","0.32.0","0.32.1","0.33.0","0.34.0","0.35.0","0.35.1","0.36.0","0.37.0","0.38.0","0.39.0","0.39.1","0.39.2","0.40.0","0.40.1","0.41.0","0.41.1","0.41.2","0.41.3","0.41.4","0.42.0","0.43.0","0.43.1","0.43.2","0.43.3","0.43.4","0.44.0","0.44.1","0.44.10","0.44.11","0.44.12","0.44.13","0.44.14","0.44.2","0.44.3","0.44.4","0.44.5","0.44.6","0.44.7","0.44.8","0.44.9","0.45.0","0.45.1","0.46.0","0.46.1","0.47.0","0.47.1","0.48.0","0.49.0","0.49.1","0.50.0","0.51.0","0.51.1","0.52.0","0.52.1","0.52.2","0.52.3","0.52.4","0.52.5","0.52.6","0.53.0","0.53.1","0.54.0","0.55.0","0.55.1","0.55.2","0.56.0","0.56.1","0.56.2","0.57.0","0.57.1","0.57.2","0.57.3","0.58.0","0.58.1","0.59.0","0.60.0","0.60.1","0.61.0","0.61.1","0.61.2","0.61.3","0.61.4","0.61.5","0.62.0","0.62.1","0.63.0","0.63.1","0.63.2","0.63.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-qfv2-3p2f-vg48/GHSA-qfv2-3p2f-vg48.json"}}],"schema_version":"1.9.0"}