From 1c28c3242d91f9fe79f6386f90900c5540d6482e Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 16 Sep 2024 17:34:53 +0000 Subject: [PATCH] Publish GHSA-4pwp-cx67-5cpx --- .../GHSA-4pwp-cx67-5cpx.json | 20 +++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2024/01/GHSA-4pwp-cx67-5cpx/GHSA-4pwp-cx67-5cpx.json b/advisories/github-reviewed/2024/01/GHSA-4pwp-cx67-5cpx/GHSA-4pwp-cx67-5cpx.json index 21b0d4b1d1d..e965125cc0f 100644 --- a/advisories/github-reviewed/2024/01/GHSA-4pwp-cx67-5cpx/GHSA-4pwp-cx67-5cpx.json +++ b/advisories/github-reviewed/2024/01/GHSA-4pwp-cx67-5cpx/GHSA-4pwp-cx67-5cpx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4pwp-cx67-5cpx", - "modified": "2024-01-31T23:11:17Z", + "modified": "2024-09-16T17:33:27Z", "published": "2024-01-31T23:11:17Z", "aliases": [ "CVE-2019-19499" @@ -12,13 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P" } ], "affected": [ { "package": { "ecosystem": "Go", - "name": "github.com/grafana/grafana/pkg/tsdb/mysql" + "name": "github.com/grafana/grafana" }, "ranges": [ { @@ -44,6 +48,14 @@ "type": "WEB", "url": "https://github.com/grafana/grafana/pull/20192" }, + { + "type": "WEB", + "url": "https://github.com/grafana/grafana/commit/19dbd27c5caa1a160bd5854b65a4e1fe2a8a4f00" + }, + { + "type": "PACKAGE", + "url": "https://github.com/grafana/grafana" + }, { "type": "WEB", "url": "https://github.com/grafana/grafana/blob/master/CHANGELOG.md#644-2019-11-06" @@ -51,10 +63,6 @@ { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20200918-0003" - }, - { - "type": "WEB", - "url": "https://swarm.ptsecurity.com/grafana-6-4-3-arbitrary-file-read" } ], "database_specific": {