Add lookup server advisory

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

3 files changed, 45 insertions, 0 deletions

diff --git a/advisories/advisories.rss b/advisories/advisories.rss
index 6a3d1607..f211b04e 100644
--- a/advisories/advisories.rss
+++ b/advisories/advisories.rss
@@ -11,6 +11,12 @@
   <guid isPermaLink="true">https://nextcloud.com/security/advisory/?id=nC-SA-2019-011</guid>
   <pubDate>Fri, 26 Jul 2019 12:00:00 +0200</pubDate>
  </item><item>
+  <title>lookup-server: SQL Injection in lookup-server (NC-SA-2019-010)</title>
+  <description>Improper sanitation of user input allowed any unauthenticated user to perform SQL injection attacks.&lt;br/&gt;&lt;hr/&gt;&lt;p&gt;&lt;strong&gt;&lt;a href=&quot;https://nextcloud.com/security/advisory/?id=nC-SA-2019-010&quot;&gt;For more information please consult the official advisory.&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;</description>
+  <link>https://nextcloud.com/security/advisory/?id=nC-SA-2019-010</link>
+  <guid isPermaLink="true">https://nextcloud.com/security/advisory/?id=nC-SA-2019-010</guid>
+  <pubDate>Fri, 26 Jul 2019 12:00:00 +0200</pubDate>
+ </item><item>
   <title>Mobile App: Improper sanitization of HTML in directory names (NC-SA-2019-009)</title>
   <description>&lt;p&gt;Some basic HTML tags were rendered as Markup in directory names.&lt;/p&gt;&lt;br/&gt;&lt;hr/&gt;&lt;p&gt;&lt;strong&gt;&lt;a href=&quot;https://nextcloud.com/security/advisory/?id=nC-SA-2019-009&quot;&gt;For more information please consult the official advisory.&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;</description>
   <link>https://nextcloud.com/security/advisory/?id=nC-SA-2019-009</link>
diff --git a/advisories/full-list.php b/advisories/full-list.php
index 5ccf26a4..ab8355a4 100644
--- a/advisories/full-list.php
+++ b/advisories/full-list.php
@@ -29,6 +29,11 @@
 	<li><a href="/security/advisory/?id=NC-SA-2019-005">SQL injection in Android app content provider (NC-SA-2019-005)</a> 2019-07-26</li>
 </ul>
 
+<h3>lookup-server 0.3.0</h3>
+<ul>
+	<li><a href="/security/advisory/?id=NC-SA-2019-010">SQL Injection in lookup-server (NC-SA-2019-010)</a> 2019-07-26</li>
+</ul>
+
 <h3>Nextcloud Server 15.0.1</h3>
 <ul>
 	<li><a href="/security/advisory/?id=NC-SA-2019-001">Classification of calendar events is ignored by the activity stream (NC-SA-2019-001)</a> 2019-04-12</li>
diff --git a/advisories/nc-sa-2019-010.php b/advisories/nc-sa-2019-010.php
new file mode 100644
index 00000000..90678881
--- /dev/null
+++ b/advisories/nc-sa-2019-010.php
@@ -0,0 +1,34 @@
+<div class="row page-content-header">
+<div class="col-md-12">
+    <h1>Security Advisory</h1>
+    <a href="/security/advisories/">Back to advisories</a>
+</div>
+</div>
+<div class="row">
+    <div class="col-md-12">
+        <h2>SQL Injection in lookup-server (NC-SA-2019-010)</h2>
+        <p>26th July 2019</p>
+        <p>Risk level: <strong>Low</strong></p>
+        <p>CVSS v3 Base Score: 10 (<a href="https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N">AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N</a>)</p>
+        <p>CWE: <a href="https://cwe.mitre.org/data/definitions/89.html">SQL Injection (CWE-89)</a></p>
+        <p>HackerOne report: <a href="https://hackerone.com/reports/508487">508487</a></p>
+        <h3>Description</h3>
+        <p>Improper sanitation of user input allowed any unauthenticated user to perform SQL injection attacks.</p>
+        <h3>Affected Software</h3>
+        <ul>
+            <li>Nextcloud Lookup-server &lt; <strong>0.3.0</strong> (CVE assignment pending)</li>
+
+        </ul>
+        <h3>Action Taken</h3>
+        <p>The error has been fixed.</p>
+        <h3>Resolution</h3>
+        <p>It is recommended that all instances are upgraded to at least version 0.3.0.</p>
+        <h3>Acknowledgements</h3>
+        <p>The Nextcloud team thanks the following people for their research and responsible disclosure of the above advisory:</p>
+        <ul>
+            <li>Leon Klingele (security@leonklingele.de) - Vulnerability discovery and disclosure.</li>
+        </ul>
+        <br/>
+        <small style="color:grey">This advisory is licensed <a href="https://creativecommons.org/licenses/by-sa/4.0/">CC BY-SA 4.0</a>.</small>
+    </div>
+</div>