diff --git a/advisories/unreviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json b/advisories/github-reviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json similarity index 59% rename from advisories/unreviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json rename to advisories/github-reviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json index ada6e8b362b..0c91939dea4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json +++ b/advisories/github-reviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json @@ -1,19 +1,49 @@ { "schema_version": "1.4.0", "id": "GHSA-6xqg-f34f-5fjx", - "modified": "2025-04-11T03:59:16Z", + "modified": "2025-04-12T02:46:53Z", "published": "2022-05-13T01:13:17Z", "aliases": [ "CVE-2011-4282" ], + "summary": "Moodle vulnerable to Cross-site Scripting", "details": "Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sort or (2) show parameter.", - "severity": [], - "affected": [], + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "moodle/moodle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.0.0" + }, + { + "fixed": "2.0.2" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4282" }, + { + "type": "PACKAGE", + "url": "http://git.moodle.org" + }, { "type": "WEB", "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=73de6fa06f6923278950a445bd69b3fbc1e518d2" @@ -35,9 +65,9 @@ "cwe_ids": [ "CWE-79" ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "LOW", + "github_reviewed": true, + "github_reviewed_at": "2025-04-12T02:46:53Z", "nvd_published_at": "2012-07-16T10:28:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json b/advisories/github-reviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json similarity index 59% rename from advisories/unreviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json rename to advisories/github-reviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json index 1c0e17731ee..908cfd94185 100644 --- a/advisories/unreviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json +++ b/advisories/github-reviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json @@ -1,19 +1,49 @@ { "schema_version": "1.4.0", "id": "GHSA-m97f-x4mr-4x3q", - "modified": "2025-04-11T03:59:16Z", + "modified": "2025-04-12T02:47:36Z", "published": "2022-05-13T01:13:16Z", "aliases": [ "CVE-2011-4281" ], + "summary": "Moodle vulnerable to Cross-Site Request Forgery", "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.", - "severity": [], - "affected": [], + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "moodle/moodle" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.0.0" + }, + { + "fixed": "2.0.2" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4281" }, + { + "type": "PACKAGE", + "url": "http://git.moodle.org" + }, { "type": "WEB", "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9cedb80c5d6318aa17cd66912d37e6ef3dca9455" @@ -36,8 +66,8 @@ "CWE-352" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-04-12T02:47:35Z", "nvd_published_at": "2012-07-16T10:28:00Z" } } \ No newline at end of file