Publish Advisories

GHSA-6xqg-f34f-5fjx
GHSA-m97f-x4mr-4x3q

advisories/github-reviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json

@@ -1,19 +1,49 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6xqg-f34f-5fjx",
-  "modified": "2025-04-11T03:59:16Z",
+  "modified": "2025-04-12T02:46:53Z",
   "published": "2022-05-13T01:13:17Z",
   "aliases": [
     "CVE-2011-4282"
   ],
+  "summary": "Moodle vulnerable to Cross-site Scripting",
   "details": "Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sort or (2) show parameter.",
-  "severity": [],
-  "affected": [],
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "moodle/moodle"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.0.0"
+            },
+            {
+              "fixed": "2.0.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4282"
     },
+    {
+      "type": "PACKAGE",
+      "url": "http://git.moodle.org"
+    },
     {
       "type": "WEB",
       "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=73de6fa06f6923278950a445bd69b3fbc1e518d2"
@@ -35,9 +65,9 @@
     "cwe_ids": [
       "CWE-79"
     ],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "severity": "LOW",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-12T02:46:53Z",
     "nvd_published_at": "2012-07-16T10:28:00Z"
   }
 }

advisories/github-reviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json

@@ -1,19 +1,49 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m97f-x4mr-4x3q",
-  "modified": "2025-04-11T03:59:16Z",
+  "modified": "2025-04-12T02:47:36Z",
   "published": "2022-05-13T01:13:16Z",
   "aliases": [
     "CVE-2011-4281"
   ],
+  "summary": "Moodle vulnerable to Cross-Site Request Forgery",
   "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.",
-  "severity": [],
-  "affected": [],
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "moodle/moodle"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.0.0"
+            },
+            {
+              "fixed": "2.0.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4281"
     },
+    {
+      "type": "PACKAGE",
+      "url": "http://git.moodle.org"
+    },
     {
       "type": "WEB",
       "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9cedb80c5d6318aa17cd66912d37e6ef3dca9455"
@@ -36,8 +66,8 @@
       "CWE-352"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-12T02:47:35Z",
     "nvd_published_at": "2012-07-16T10:28:00Z"
   }
 }