diff --git a/advisories/github-reviewed/2022/05/GHSA-4c42-4rxm-x6qf/GHSA-4c42-4rxm-x6qf.json b/advisories/github-reviewed/2022/05/GHSA-4c42-4rxm-x6qf/GHSA-4c42-4rxm-x6qf.json index b704bb14c58..2f826afe486 100644 --- a/advisories/github-reviewed/2022/05/GHSA-4c42-4rxm-x6qf/GHSA-4c42-4rxm-x6qf.json +++ b/advisories/github-reviewed/2022/05/GHSA-4c42-4rxm-x6qf/GHSA-4c42-4rxm-x6qf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4c42-4rxm-x6qf", - "modified": "2024-05-16T18:30:50Z", + "modified": "2024-09-18T16:01:56Z", "published": "2022-05-17T04:53:45Z", "aliases": [ "CVE-2013-1443" @@ -9,20 +9,27 @@ "summary": "Django Denial of Service Vulnerability in the authentication framework ", "details": "The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "1.4.0" + "introduced": "1.4" }, { "fixed": "1.4.8" @@ -34,14 +41,14 @@ { "package": { "ecosystem": "PyPI", - "name": "django" + "name": "Django" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "1.5.0" + "introduced": "1.5" }, { "fixed": "1.5.4" @@ -68,6 +75,10 @@ "type": "PACKAGE", "url": "https://github.com/django/django" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2013-18.yaml" + }, { "type": "WEB", "url": "https://www.djangoproject.com/weblog/2013/sep/15/security" @@ -93,7 +104,7 @@ "cwe_ids": [ "CWE-400" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-08-17T23:30:35Z", "nvd_published_at": "2013-09-23T20:55:00Z"