From 11f68fa769180ad6f234b0e6b629b0cb21100a8a Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 19 Aug 2024 21:10:47 +0000
Subject: [PATCH] Publish Advisories

GHSA-cpfp-m5qw-c4r3
GHSA-h6jq-w432-j26w
---
 .../GHSA-cpfp-m5qw-c4r3/GHSA-cpfp-m5qw-c4r3.json   | 14 +++++++++++---
 .../GHSA-h6jq-w432-j26w/GHSA-h6jq-w432-j26w.json   |  2 +-
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2024/08/GHSA-cpfp-m5qw-c4r3/GHSA-cpfp-m5qw-c4r3.json b/advisories/github-reviewed/2024/08/GHSA-cpfp-m5qw-c4r3/GHSA-cpfp-m5qw-c4r3.json
index 33541e38efa..468368f183d 100644
--- a/advisories/github-reviewed/2024/08/GHSA-cpfp-m5qw-c4r3/GHSA-cpfp-m5qw-c4r3.json
+++ b/advisories/github-reviewed/2024/08/GHSA-cpfp-m5qw-c4r3/GHSA-cpfp-m5qw-c4r3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cpfp-m5qw-c4r3",
-  "modified": "2024-08-15T22:19:00Z",
+  "modified": "2024-08-19T21:09:17Z",
   "published": "2024-08-15T18:31:51Z",
   "aliases": [
     "CVE-2024-42681"
@@ -9,7 +9,14 @@
   "summary": "Improper Preservation of Permissions in xxl-job",
   "details": "Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -48,9 +55,10 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-276",
       "CWE-281"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-08-15T22:19:00Z",
     "nvd_published_at": "2024-08-15T17:15:18Z"
diff --git a/advisories/github-reviewed/2024/08/GHSA-h6jq-w432-j26w/GHSA-h6jq-w432-j26w.json b/advisories/github-reviewed/2024/08/GHSA-h6jq-w432-j26w/GHSA-h6jq-w432-j26w.json
index ef7e08e5c87..90554d53a53 100644
--- a/advisories/github-reviewed/2024/08/GHSA-h6jq-w432-j26w/GHSA-h6jq-w432-j26w.json
+++ b/advisories/github-reviewed/2024/08/GHSA-h6jq-w432-j26w/GHSA-h6jq-w432-j26w.json
@@ -59,7 +59,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-521"
     ],
     "severity": "LOW",
     "github_reviewed": true,