From 18eaa7ef539ddd7b8642d58574f41cb1365405dc Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sat, 12 Apr 2025 02:48:43 +0000
Subject: [PATCH] Publish Advisories

GHSA-6xqg-f34f-5fjx
GHSA-m97f-x4mr-4x3q
---
 .../GHSA-6xqg-f34f-5fjx.json                  | 42 ++++++++++++++++---
 .../GHSA-m97f-x4mr-4x3q.json                  | 40 +++++++++++++++---
 2 files changed, 71 insertions(+), 11 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json (59%)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json (59%)

diff --git a/advisories/unreviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json b/advisories/github-reviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json
similarity index 59%
rename from advisories/unreviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json
rename to advisories/github-reviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json
index ada6e8b362b..0c91939dea4 100644
--- a/advisories/unreviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json
+++ b/advisories/github-reviewed/2022/05/GHSA-6xqg-f34f-5fjx/GHSA-6xqg-f34f-5fjx.json
@@ -1,19 +1,49 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6xqg-f34f-5fjx",
-  "modified": "2025-04-11T03:59:16Z",
+  "modified": "2025-04-12T02:46:53Z",
   "published": "2022-05-13T01:13:17Z",
   "aliases": [
     "CVE-2011-4282"
   ],
+  "summary": "Moodle vulnerable to Cross-site Scripting",
   "details": "Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sort or (2) show parameter.",
-  "severity": [],
-  "affected": [],
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "moodle/moodle"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.0.0"
+            },
+            {
+              "fixed": "2.0.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4282"
     },
+    {
+      "type": "PACKAGE",
+      "url": "http://git.moodle.org"
+    },
     {
       "type": "WEB",
       "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=73de6fa06f6923278950a445bd69b3fbc1e518d2"
@@ -35,9 +65,9 @@
     "cwe_ids": [
       "CWE-79"
     ],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "severity": "LOW",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-12T02:46:53Z",
     "nvd_published_at": "2012-07-16T10:28:00Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json b/advisories/github-reviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json
similarity index 59%
rename from advisories/unreviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json
rename to advisories/github-reviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json
index 1c0e17731ee..908cfd94185 100644
--- a/advisories/unreviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json
+++ b/advisories/github-reviewed/2022/05/GHSA-m97f-x4mr-4x3q/GHSA-m97f-x4mr-4x3q.json
@@ -1,19 +1,49 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m97f-x4mr-4x3q",
-  "modified": "2025-04-11T03:59:16Z",
+  "modified": "2025-04-12T02:47:36Z",
   "published": "2022-05-13T01:13:16Z",
   "aliases": [
     "CVE-2011-4281"
   ],
+  "summary": "Moodle vulnerable to Cross-Site Request Forgery",
   "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.",
-  "severity": [],
-  "affected": [],
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "moodle/moodle"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.0.0"
+            },
+            {
+              "fixed": "2.0.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4281"
     },
+    {
+      "type": "PACKAGE",
+      "url": "http://git.moodle.org"
+    },
     {
       "type": "WEB",
       "url": "http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9cedb80c5d6318aa17cd66912d37e6ef3dca9455"
@@ -36,8 +66,8 @@
       "CWE-352"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-12T02:47:35Z",
     "nvd_published_at": "2012-07-16T10:28:00Z"
   }
 }
\ No newline at end of file