Publish GHSA-jxg5-35fj-ccwf

advisories/github-reviewed/2022/05/GHSA-jxg5-35fj-ccwf/GHSA-jxg5-35fj-ccwf.json

@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jxg5-35fj-ccwf",
-  "modified": "2022-05-17T03:02:43Z",
+  "modified": "2023-07-31T21:01:24Z",
   "published": "2022-05-17T03:02:43Z",
   "aliases": [
     "CVE-2016-5091"
   ],
+  "summary": "Extbase for TYPO3 allows RCE",
   "details": "Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.",
   "severity": [
     {
@@ -14,7 +15,53 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "typo3/cms-extbase"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "6.2.24"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "typo3/cms-extbase"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "7.0"
+            },
+            {
+              "fixed": "7.6.8"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "typo3/cms-extbase"
+      },
+      "versions": [
+        "8.1.1"
+      ]
+    }
   ],
   "references": [
     {
@@ -39,8 +86,8 @@
 
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-07-31T21:01:24Z",
     "nvd_published_at": "2017-01-23T21:59:00Z"
   }
 }