diff --git a/advisories/unreviewed/2023/05/GHSA-fjx5-xm7q-whvj/GHSA-fjx5-xm7q-whvj.json b/advisories/github-reviewed/2023/05/GHSA-fjx5-xm7q-whvj/GHSA-fjx5-xm7q-whvj.json similarity index 52% rename from advisories/unreviewed/2023/05/GHSA-fjx5-xm7q-whvj/GHSA-fjx5-xm7q-whvj.json rename to advisories/github-reviewed/2023/05/GHSA-fjx5-xm7q-whvj/GHSA-fjx5-xm7q-whvj.json index 27b9ba56c86..f060265defc 100644 --- a/advisories/unreviewed/2023/05/GHSA-fjx5-xm7q-whvj/GHSA-fjx5-xm7q-whvj.json +++ b/advisories/github-reviewed/2023/05/GHSA-fjx5-xm7q-whvj/GHSA-fjx5-xm7q-whvj.json @@ -1,17 +1,36 @@ { "schema_version": "1.4.0", "id": "GHSA-fjx5-xm7q-whvj", - "modified": "2023-05-12T12:30:19Z", + "modified": "2023-05-12T20:14:07Z", "published": "2023-05-12T12:30:19Z", "aliases": [ "CVE-2023-30130" ], + "summary": "CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter", "details": "An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter.", "severity": [ ], "affected": [ - + { + "package": { + "ecosystem": "Packagist", + "name": "craftcms/cms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "3.8.1" + } + ] + } + ] + } ], "references": [ { @@ -22,6 +41,10 @@ "type": "WEB", "url": "https://craftcms.com/" }, + { + "type": "PACKAGE", + "url": "https://github.com/craftcms/cms" + }, { "type": "WEB", "url": "https://tf1t.gitbook.io/mycve/craftcms/server-site-template-injection-on-craftcms-3.8.1" @@ -31,9 +54,9 @@ "cwe_ids": [ ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2023-05-12T20:14:07Z", "nvd_published_at": null } } \ No newline at end of file