diff --git a/advisories/github-reviewed/2022/05/GHSA-8hmh-mhqv-7638/GHSA-8hmh-mhqv-7638.json b/advisories/github-reviewed/2022/05/GHSA-8hmh-mhqv-7638/GHSA-8hmh-mhqv-7638.json index cba27f07072..d37dcb2069a 100644 --- a/advisories/github-reviewed/2022/05/GHSA-8hmh-mhqv-7638/GHSA-8hmh-mhqv-7638.json +++ b/advisories/github-reviewed/2022/05/GHSA-8hmh-mhqv-7638/GHSA-8hmh-mhqv-7638.json @@ -1,13 +1,14 @@ { "schema_version": "1.4.0", "id": "GHSA-8hmh-mhqv-7638", - "modified": "2024-07-09T19:40:12Z", + "modified": "2024-07-10T19:35:20Z", "published": "2022-05-17T05:51:58Z", + "withdrawn": "2024-07-10T19:35:20Z", "aliases": [ "CVE-2008-7227" ], "summary": "PartialBufferOutputStream2 flush issues", - "details": "PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.", + "details": "### Withdrawn\nThis advisory has been withdrawn as there the effects of the bug would only give the caller an incomplete view of data which they would be authorized to see.\n\n### Original Advisory\nPartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.", "severity": [ ], @@ -56,6 +57,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-7227" }, + { + "type": "WEB", + "url": "https://github.com/github/advisory-database/pull/4585" + }, { "type": "WEB", "url": "https://osgeo-org.atlassian.net/browse/GEOS-1747"