Publish Advisories

GHSA-cpfp-m5qw-c4r3
GHSA-h6jq-w432-j26w

advisories/github-reviewed/2024/08/GHSA-cpfp-m5qw-c4r3/GHSA-cpfp-m5qw-c4r3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cpfp-m5qw-c4r3",
-  "modified": "2024-08-15T22:19:00Z",
+  "modified": "2024-08-19T21:09:17Z",
   "published": "2024-08-15T18:31:51Z",
   "aliases": [
     "CVE-2024-42681"
@@ -9,7 +9,14 @@
   "summary": "Improper Preservation of Permissions in xxl-job",
   "details": "Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -48,9 +55,10 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-276",
       "CWE-281"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-08-15T22:19:00Z",
     "nvd_published_at": "2024-08-15T17:15:18Z"

advisories/github-reviewed/2024/08/GHSA-h6jq-w432-j26w/GHSA-h6jq-w432-j26w.json

@@ -59,7 +59,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-521"
     ],
     "severity": "LOW",
     "github_reviewed": true,