From 0be431d7a08420d75f62c5bdecef951a32ccbecd Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 28 Oct 2024 21:52:51 +0000 Subject: [PATCH] Publish Advisories GHSA-2mv8-jjm5-f3hr GHSA-h345-r48x-g68f --- .../10/GHSA-2mv8-jjm5-f3hr/GHSA-2mv8-jjm5-f3hr.json | 11 +++++++++-- .../10/GHSA-h345-r48x-g68f/GHSA-h345-r48x-g68f.json | 4 ++-- 2 files changed, 11 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2024/10/GHSA-2mv8-jjm5-f3hr/GHSA-2mv8-jjm5-f3hr.json b/advisories/github-reviewed/2024/10/GHSA-2mv8-jjm5-f3hr/GHSA-2mv8-jjm5-f3hr.json index 08b10568d3e..34666c3b89a 100644 --- a/advisories/github-reviewed/2024/10/GHSA-2mv8-jjm5-f3hr/GHSA-2mv8-jjm5-f3hr.json +++ b/advisories/github-reviewed/2024/10/GHSA-2mv8-jjm5-f3hr/GHSA-2mv8-jjm5-f3hr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2mv8-jjm5-f3hr", - "modified": "2024-10-25T21:48:15Z", + "modified": "2024-10-28T21:51:21Z", "published": "2024-10-25T21:31:28Z", "aliases": [ "CVE-2024-48230" @@ -9,7 +9,14 @@ "summary": "SQL injection in funadmin", "details": "funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \\backend\\controller\\auth\\Auth.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" + } ], "affected": [ { diff --git a/advisories/github-reviewed/2024/10/GHSA-h345-r48x-g68f/GHSA-h345-r48x-g68f.json b/advisories/github-reviewed/2024/10/GHSA-h345-r48x-g68f/GHSA-h345-r48x-g68f.json index 63acac8a495..a9a6557e875 100644 --- a/advisories/github-reviewed/2024/10/GHSA-h345-r48x-g68f/GHSA-h345-r48x-g68f.json +++ b/advisories/github-reviewed/2024/10/GHSA-h345-r48x-g68f/GHSA-h345-r48x-g68f.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-h345-r48x-g68f", - "modified": "2024-10-28T21:50:31Z", + "modified": "2024-10-28T21:51:18Z", "published": "2024-10-25T21:31:28Z", "aliases": [ "CVE-2024-48229" @@ -15,7 +15,7 @@ }, { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" } ], "affected": [