Nixpkgs security tracker

Dismissed

(not in Nixpkgs)

Permalink CVE-2024-52488

9.9 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 2 days, 8 hours ago by @LeSuisse Activity log

Created suggestion 2 days, 13 hours ago
@LeSuisse dismissed (not in Nixpkgs) 2 days, 8 hours ago

WordPress Grip theme <= 1.0.9 - Arbitrary Plugin Activation/Deactivation to RCE vulnerability

Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions.

References

https://patchstack.com/database/wordpress/theme/grip/vulnerability/wordpress-gr… vdb-entry

Affected products

grip

=<1.0.9

Matching in nixpkgs

pkgs.grip

GTK-based audio CD player/ripper

nixos-unstable 4.2.4
- nixpkgs-unstable 4.2.4
- nixos-unstable-small 4.2.4
nixos-26.05 4.2.4
- nixos-26.05-small 4.2.4
- nixpkgs-26.05-darwin 4.2.4

pkgs.go-grip

Preview Markdown files locally before committing them

nixos-unstable 0.9.2
- nixpkgs-unstable 0.9.2
- nixos-unstable-small 0.9.2
nixos-26.05 0.9.2
- nixos-26.05-small 0.9.2
- nixpkgs-26.05-darwin 0.9.2

pkgs.regrippy

Modern Python-3-based alternative to RegRipper

nixos-unstable 2.0.2
- nixpkgs-unstable 2.0.2
- nixos-unstable-small 2.0.2
nixos-26.05 2.0.2
- nixos-26.05-small 2.0.2
- nixpkgs-26.05-darwin 2.0.2

pkgs.grip-grab

Fast, more lightweight ripgrep alternative for daily use cases

nixos-unstable 0.6.7
- nixpkgs-unstable 0.6.7
- nixos-unstable-small 0.6.7
nixos-26.05 0.6.7
- nixos-26.05-small 0.6.7
- nixpkgs-26.05-darwin 0.6.7

pkgs.regripper

Open source forensic software used as a Windows Registry data extraction command line

nixos-unstable 0-unstable-2024-12-12
- nixpkgs-unstable 0-unstable-2024-12-12
- nixos-unstable-small 0-unstable-2024-12-12
nixos-26.05 0-unstable-2024-12-12
- nixos-26.05-small 0-unstable-2024-12-12
- nixpkgs-26.05-darwin 0-unstable-2024-12-12

pkgs.grip-search

None

nixos-unstable 0.8
- nixos-unstable-small 0.8
nixos-26.05 0.8
- nixos-26.05-small 0.8
- nixpkgs-26.05-darwin 0.8

pkgs.jetbrains.datagrip