diff --git a/advisories/github-reviewed/2022/07/GHSA-xrf4-39fm-j5f2/GHSA-xrf4-39fm-j5f2.json b/advisories/github-reviewed/2022/07/GHSA-xrf4-39fm-j5f2/GHSA-xrf4-39fm-j5f2.json index 6c4574a23bd..440bda3562d 100644 --- a/advisories/github-reviewed/2022/07/GHSA-xrf4-39fm-j5f2/GHSA-xrf4-39fm-j5f2.json +++ b/advisories/github-reviewed/2022/07/GHSA-xrf4-39fm-j5f2/GHSA-xrf4-39fm-j5f2.json @@ -1,17 +1,21 @@ { "schema_version": "1.4.0", "id": "GHSA-xrf4-39fm-j5f2", - "modified": "2022-08-06T09:34:18Z", + "modified": "2024-09-20T17:10:34Z", "published": "2022-07-26T00:01:08Z", "aliases": [ "CVE-2022-2514" ], - "summary": "Fava time and filter parameters vulnerable to reflected XSS before v1.22", + "summary": "Fava time and filter parameters vulnerable to reflected Cross-site Scripting", "details": "The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected cross-site scripting due to the lack of escaping of error messages which contained the parameters in verbatim.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" } ], "affected": [ @@ -48,6 +52,10 @@ "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-xrf4-39fm-j5f2" }, + { + "type": "PACKAGE", + "url": "https://github.com/beancount/fava" + }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/fava/PYSEC-2022-239.yaml" diff --git a/advisories/github-reviewed/2022/09/GHSA-8fg9-p83m-x5pq/GHSA-8fg9-p83m-x5pq.json b/advisories/github-reviewed/2022/09/GHSA-8fg9-p83m-x5pq/GHSA-8fg9-p83m-x5pq.json index a63ba58230d..c7c48d477b4 100644 --- a/advisories/github-reviewed/2022/09/GHSA-8fg9-p83m-x5pq/GHSA-8fg9-p83m-x5pq.json +++ b/advisories/github-reviewed/2022/09/GHSA-8fg9-p83m-x5pq/GHSA-8fg9-p83m-x5pq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8fg9-p83m-x5pq", - "modified": "2022-10-06T17:10:50Z", + "modified": "2024-09-20T17:09:12Z", "published": "2022-09-27T15:28:00Z", "aliases": [ "CVE-2022-39280" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [