Publish Advisories

GHSA-5mp4-32rr-v3x5
GHSA-h3rw-77w7-92gf
GHSA-3wwx-63fv-pfq6
GHSA-7pp4-388x-2xqj

advisories/github-reviewed/2024/02/GHSA-5mp4-32rr-v3x5/GHSA-5mp4-32rr-v3x5.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5mp4-32rr-v3x5",
-  "modified": "2024-02-14T15:08:24Z",
+  "modified": "2024-10-21T21:40:50Z",
   "published": "2024-02-14T15:08:23Z",
   "aliases": [
     "CVE-2024-25125"
@@ -9,7 +9,10 @@
   "summary": "Absolute path traversal vulnerability in digdag server",
   "details": "### Summary\n\nTreasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally.\n\n### Impact\n\nThis issue may lead to Information Disclosure.\n",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
   ],
   "affected": [
     {
@@ -37,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/treasure-data/digdag/security/advisories/GHSA-5mp4-32rr-v3x5"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25125"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/treasure-data/digdag/commit/eae89b0daf6c62f12309d8c7194454dfb18cc5c3"
@@ -53,6 +60,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2024-02-14T15:08:23Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-02-14T03:15:15Z"
   }
 }

advisories/github-reviewed/2024/02/GHSA-h3rw-77w7-92gf/GHSA-h3rw-77w7-92gf.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h3rw-77w7-92gf",
-  "modified": "2024-08-02T16:00:22Z",
+  "modified": "2024-10-21T21:40:48Z",
   "published": "2024-02-11T06:30:27Z",
   "aliases": [
     "CVE-2024-25718"
@@ -75,7 +75,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-400"
+      "CWE-400",
+      "CWE-613"
     ],
     "severity": "CRITICAL",
     "github_reviewed": true,

advisories/github-reviewed/2024/10/GHSA-3wwx-63fv-pfq6/GHSA-3wwx-63fv-pfq6.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3wwx-63fv-pfq6",
-  "modified": "2024-10-21T19:03:47Z",
+  "modified": "2024-10-21T21:41:15Z",
   "published": "2024-10-21T19:03:47Z",
   "aliases": [
     "CVE-2024-47825"
@@ -59,6 +59,10 @@
       "type": "WEB",
       "url": "https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47825"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45"
@@ -74,11 +78,12 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-1038"
+      "CWE-1038",
+      "CWE-276"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2024-10-21T19:03:47Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-10-21T19:15:03Z"
   }
 }

advisories/github-reviewed/2024/10/GHSA-7pp4-388x-2xqj/GHSA-7pp4-388x-2xqj.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7pp4-388x-2xqj",
-  "modified": "2024-10-21T19:43:39Z",
+  "modified": "2024-10-21T21:41:17Z",
   "published": "2024-10-21T12:30:56Z",
   "aliases": [
     "CVE-2024-48231"
@@ -9,6 +9,10 @@
   "summary": "SQL injection in funadmin",
   "details": "Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \\app\\backend\\controller\\auth\\Auth.php.",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"