diff --git a/advisories/github-reviewed/2023/12/GHSA-97rv-88gf-phvr/GHSA-97rv-88gf-phvr.json b/advisories/github-reviewed/2023/12/GHSA-97rv-88gf-phvr/GHSA-97rv-88gf-phvr.json index 6965afa73b5..ca01dc8142d 100644 --- a/advisories/github-reviewed/2023/12/GHSA-97rv-88gf-phvr/GHSA-97rv-88gf-phvr.json +++ b/advisories/github-reviewed/2023/12/GHSA-97rv-88gf-phvr/GHSA-97rv-88gf-phvr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-97rv-88gf-phvr", - "modified": "2023-12-15T23:25:04Z", + "modified": "2023-12-19T21:42:31Z", "published": "2023-12-15T09:30:17Z", "aliases": [ "CVE-2023-46279" @@ -9,7 +9,10 @@ "summary": "Apache Dubbo: Bypass deny serialize list check in Apache Dubbo", "details": "Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5.\n\nUsers are recommended to upgrade to the latest version, which fixes the issue.\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -57,7 +60,7 @@ "cwe_ids": [ "CWE-502" ], - "severity": "HIGH", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-12-15T23:25:04Z", "nvd_published_at": "2023-12-15T09:15:07Z"