diff --git a/advisories/unreviewed/2022/04/GHSA-2w2w-cv3h-rr38/GHSA-2w2w-cv3h-rr38.json b/advisories/github-reviewed/2022/04/GHSA-2w2w-cv3h-rr38/GHSA-2w2w-cv3h-rr38.json similarity index 67% rename from advisories/unreviewed/2022/04/GHSA-2w2w-cv3h-rr38/GHSA-2w2w-cv3h-rr38.json rename to advisories/github-reviewed/2022/04/GHSA-2w2w-cv3h-rr38/GHSA-2w2w-cv3h-rr38.json index acc9d43ffd0..32e61137054 100644 --- a/advisories/unreviewed/2022/04/GHSA-2w2w-cv3h-rr38/GHSA-2w2w-cv3h-rr38.json +++ b/advisories/github-reviewed/2022/04/GHSA-2w2w-cv3h-rr38/GHSA-2w2w-cv3h-rr38.json @@ -1,14 +1,43 @@ { "schema_version": "1.4.0", "id": "GHSA-2w2w-cv3h-rr38", - "modified": "2025-04-03T03:43:57Z", + "modified": "2025-04-03T14:32:44Z", "published": "2022-04-30T18:17:00Z", "aliases": [ "CVE-2001-0917" ], + "summary": "Apache Tomcat Reveals Path through Long URL", "details": "Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.", - "severity": [], - "affected": [], + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "4.0.2" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 4.0.1" + } + } + ], "references": [ { "type": "ADVISORY", @@ -18,6 +47,10 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7599" }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/tomcat" + }, { "type": "WEB", "url": "https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E" @@ -52,10 +85,12 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-200" + ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-04-03T14:32:44Z", "nvd_published_at": "2001-11-22T05:00:00Z" } } \ No newline at end of file