Skip to content

Commit 4d7c264

Browse files
committed
added ghsa, fixed word break
1 parent 225c4c9 commit 4d7c264

File tree

6 files changed

+29
-14
lines changed

6 files changed

+29
-14
lines changed

source/_posts/Hostname spoofing in urijs.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,8 @@ advisory: true
1010
origin: https://advisory.checkmarx.net/advisory/CX-2021-4305/
1111
cves:
1212
- "CVE-2021-27516"
13+
ghsas:
14+
- "GHSA-p6j9-7xhc-rhwp"
1315
---
1416
## Summary
1517
Affected versions of urijs fails to validate the hostname correctly when using backslash in the protocol e.g. `http:\/`.

source/_posts/Open redirect in Jupyter server.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,8 @@ advisory: true
88
origin: https://advisory.checkmarx.net/advisory/CX-2020-4291/
99
cves:
1010
- "CVE-2020-26275"
11+
ghsas:
12+
- "GHSA-9f66-54xg-pc2c"
1113
---
1214
## Summary
1315
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Affected versions of Jupyter Server are vulnerable to open redirect vulnerability. All jupyter servers running without a base_url prefix are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts.

source/about/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ comments: false
66
---
77
# Who am I?
88

9-
Starting my way as a Software Engineer, I transitioned into the realm of Cyber-Security during my service in the IDF's 8200 unit, where I gained experience in both offensive and defensive cybersecurity tactics. Since entering the industry as a Security Researcher, my primary area of expertise now centers on conducting hands-on research related to cod, where I had the privilege of sharing my findings with the broader cybersecurity community.
9+
Starting my way as a Software Engineer, I transitioned into the realm of cyber security during my service in the IDFs 8200 unit, where I gained experience in both offensive and defensive cybersecurity tactics. Since entering the industry as a Security Researcher, my primary area of expertise now centers on conducting hands-on research related to code, where I had the privilege of sharing my findings with the broader cybersecurity community.
1010

1111
# Socials
1212
* [Twitter (x)](https://twitter.com/YNizry)

themes/aircloud/layout/advisories.ejs

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,16 @@ layout: layout
2626
</p>
2727
</div>
2828
<div class="post-cve">
29-
<% if (post?.cves?.length > 0){ %>
30-
<span>/</span>
31-
<% post.cves.forEach(function(cve){ %>
32-
<a class="tag" href="https://nvd.nist.gov/vuln/detail/<%= cve %>" title="<%= cve %>"><%= cve %></a>
33-
<span>/</span>
34-
<% }) %>
29+
<% if (post?.cves?.length || post?.ghsas?.length){ %>
30+
<span>/</span>
31+
<% post?.cves?.forEach(function(cve){ %>
32+
<a href="https://nvd.nist.gov/vuln/detail/<%= cve %>" title="<%= cve %>"><%= cve %></a>
33+
<span>/</span>
34+
<% }) %>
35+
<% post?.ghsas?.forEach(function(ghsa){ %>
36+
<a href="https://github.com/advisories/<%= ghsa %>" title="<%= ghsa %>"><%= ghsa %></a>
37+
<span>/</span>
38+
<% }) %>
3539
<% } %>
3640
</div>
3741
</div>

themes/aircloud/layout/post.ejs

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -18,14 +18,20 @@
1818
<% } %>
1919

2020

21-
<% if (page?.cves?.length){ %>
22-
<span class="attr">/
23-
<% page.cves.forEach(function(cve){ %>
24-
<a href="https://nvd.nist.gov/vuln/detail/<%= cve %>" title="<%= cve %>"><%= cve %></a>
25-
<span>/</span>
26-
<% }) %>
27-
</span>
21+
<% if (page?.cves?.length || page?.ghsas?.length){ %>
22+
<span class="attr">/
23+
<% page?.cves?.forEach(function(cve){ %>
24+
<a href="https://nvd.nist.gov/vuln/detail/<%= cve %>" title="<%= cve %>"><%= cve %></a>
25+
<span>/</span>
26+
<% }) %>
27+
<% page?.ghsas?.forEach(function(ghsa){ %>
28+
<a href="https://github.com/advisories/<%= ghsa %>" title="<%= ghsa %>"><%= ghsa %></a>
29+
<span>/</span>
30+
<% }) %>
31+
</span>
2832
<% } %>
33+
34+
2935
3036
<!--<span class="attr"><%= __('post.visit') %><span id="busuanzi_value_page_pv"></span>-->
3137
</span>

themes/aircloud/source/css/aircloud.css

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -707,6 +707,7 @@ div.post-cve>a {
707707
background-color: rgba(51, 112, 255, 0.1);
708708
}
709709
.post-content {
710+
word-break: break-word;
710711
line-height: 20px;
711712
font-size: 15px;
712713
text-indent: 2em;

0 commit comments

Comments
 (0)