From 06fcade034869965c79eaaaf139d08d062fec176 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 18 Oct 2024 21:52:41 +0000
Subject: [PATCH] Publish Advisories

GHSA-35rg-466w-77h3
GHSA-89rq-27xp-vgv7
GHSA-qfhw-fv3g-v836
---
 .../GHSA-35rg-466w-77h3.json                  | 14 ++++++++++++-
 .../GHSA-89rq-27xp-vgv7.json                  | 18 +++++++++++-----
 .../GHSA-qfhw-fv3g-v836.json                  | 21 ++++++++++++++++---
 3 files changed, 44 insertions(+), 9 deletions(-)

diff --git a/advisories/github-reviewed/2021/06/GHSA-35rg-466w-77h3/GHSA-35rg-466w-77h3.json b/advisories/github-reviewed/2021/06/GHSA-35rg-466w-77h3/GHSA-35rg-466w-77h3.json
index 54f6cfd72cd..d33efea3ac1 100644
--- a/advisories/github-reviewed/2021/06/GHSA-35rg-466w-77h3/GHSA-35rg-466w-77h3.json
+++ b/advisories/github-reviewed/2021/06/GHSA-35rg-466w-77h3/GHSA-35rg-466w-77h3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-35rg-466w-77h3",
-  "modified": "2021-05-27T21:54:47Z",
+  "modified": "2024-10-18T21:50:41Z",
   "published": "2021-06-18T18:44:50Z",
   "aliases": [
     "CVE-2021-33507"
@@ -12,6 +12,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
     }
   ],
   "affected": [
@@ -78,6 +82,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33507"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-35rg-466w-77h3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-79.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots"
diff --git a/advisories/github-reviewed/2022/05/GHSA-89rq-27xp-vgv7/GHSA-89rq-27xp-vgv7.json b/advisories/github-reviewed/2022/05/GHSA-89rq-27xp-vgv7/GHSA-89rq-27xp-vgv7.json
index 74d93d41e72..b7f5bb31197 100644
--- a/advisories/github-reviewed/2022/05/GHSA-89rq-27xp-vgv7/GHSA-89rq-27xp-vgv7.json
+++ b/advisories/github-reviewed/2022/05/GHSA-89rq-27xp-vgv7/GHSA-89rq-27xp-vgv7.json
@@ -1,24 +1,28 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-89rq-27xp-vgv7",
-  "modified": "2023-08-29T18:25:00Z",
+  "modified": "2024-10-18T21:52:16Z",
   "published": "2022-05-17T04:49:45Z",
   "aliases": [
     "CVE-2013-4190"
   ],
-  "summary": "Plone Multiple cross-site scripting (XSS) vulnerabilities",
+  "summary": "Plone vulnerable to cross-site scripting",
   "details": "Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.",
   "severity": [
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N"
     }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "plone"
+        "name": "Plone"
       },
       "ranges": [
         {
@@ -40,7 +44,7 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "plone"
+        "name": "Plone"
       },
       "ranges": [
         {
@@ -59,7 +63,7 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "plone"
+        "name": "Plone"
       },
       "ranges": [
         {
@@ -89,6 +93,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/plone/Plone"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-54.yaml"
+    },
     {
       "type": "WEB",
       "url": "http://plone.org/products/plone-hotfix/releases/20130618"
diff --git a/advisories/github-reviewed/2022/05/GHSA-qfhw-fv3g-v836/GHSA-qfhw-fv3g-v836.json b/advisories/github-reviewed/2022/05/GHSA-qfhw-fv3g-v836/GHSA-qfhw-fv3g-v836.json
index 229683ec941..8d40e4cd9ec 100644
--- a/advisories/github-reviewed/2022/05/GHSA-qfhw-fv3g-v836/GHSA-qfhw-fv3g-v836.json
+++ b/advisories/github-reviewed/2022/05/GHSA-qfhw-fv3g-v836/GHSA-qfhw-fv3g-v836.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qfhw-fv3g-v836",
-  "modified": "2024-04-22T22:51:04Z",
+  "modified": "2024-10-18T21:51:25Z",
   "published": "2022-05-24T19:06:41Z",
   "aliases": [
     "CVE-2021-35959"
@@ -9,13 +9,20 @@
   "summary": "Plone has stored XSS in folder contents",
   "details": "In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
+    }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "plone"
+        "name": "Plone"
       },
       "ranges": [
         {
@@ -37,6 +44,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-35959"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/plone/Plone"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2021-110.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://plone.org/security/hotfix/20210518/stored-xss-in-folder-contents"