From 29764ef69c64b4dd75aa7885d38581d88a9f4d7f Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 18 Dec 2023 17:39:45 +0000
Subject: [PATCH] Publish Advisories

GHSA-356j-hg45-x525
GHSA-3hf6-f8ch-5869
GHSA-m3p6-43xj-pf9v
GHSA-m8rw-rcpq-2vp2
GHSA-p3ph-6245-4wfc
GHSA-xv7p-jw46-8r85
---
 .../GHSA-356j-hg45-x525/GHSA-356j-hg45-x525.json |  4 ++++
 .../GHSA-3hf6-f8ch-5869/GHSA-3hf6-f8ch-5869.json |  7 +++++--
 .../GHSA-m3p6-43xj-pf9v/GHSA-m3p6-43xj-pf9v.json |  7 +++++--
 .../GHSA-m8rw-rcpq-2vp2/GHSA-m8rw-rcpq-2vp2.json | 16 ++++++++++++++++
 .../GHSA-p3ph-6245-4wfc/GHSA-p3ph-6245-4wfc.json |  7 +++++--
 .../GHSA-xv7p-jw46-8r85/GHSA-xv7p-jw46-8r85.json |  7 +++++--
 6 files changed, 40 insertions(+), 8 deletions(-)

diff --git a/advisories/github-reviewed/2023/12/GHSA-356j-hg45-x525/GHSA-356j-hg45-x525.json b/advisories/github-reviewed/2023/12/GHSA-356j-hg45-x525/GHSA-356j-hg45-x525.json
index fae60bd9fd2..e61f4d007b7 100644
--- a/advisories/github-reviewed/2023/12/GHSA-356j-hg45-x525/GHSA-356j-hg45-x525.json
+++ b/advisories/github-reviewed/2023/12/GHSA-356j-hg45-x525/GHSA-356j-hg45-x525.json
@@ -43,6 +43,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/activeadmin/activeadmin"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activeadmin/CVE-2023-50448.yml"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2023/12/GHSA-3hf6-f8ch-5869/GHSA-3hf6-f8ch-5869.json b/advisories/github-reviewed/2023/12/GHSA-3hf6-f8ch-5869/GHSA-3hf6-f8ch-5869.json
index d36c75a3ba2..3c08f4f6884 100644
--- a/advisories/github-reviewed/2023/12/GHSA-3hf6-f8ch-5869/GHSA-3hf6-f8ch-5869.json
+++ b/advisories/github-reviewed/2023/12/GHSA-3hf6-f8ch-5869/GHSA-3hf6-f8ch-5869.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3hf6-f8ch-5869",
-  "modified": "2023-12-15T03:39:59Z",
+  "modified": "2023-12-18T17:38:25Z",
   "published": "2023-12-14T18:30:21Z",
   "aliases": [
     "CVE-2023-50100"
@@ -9,7 +9,10 @@
   "summary": "Cross-site Scripting in JFinalcms",
   "details": "JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
     {
diff --git a/advisories/github-reviewed/2023/12/GHSA-m3p6-43xj-pf9v/GHSA-m3p6-43xj-pf9v.json b/advisories/github-reviewed/2023/12/GHSA-m3p6-43xj-pf9v/GHSA-m3p6-43xj-pf9v.json
index 9495dca9525..50cfcc85ef9 100644
--- a/advisories/github-reviewed/2023/12/GHSA-m3p6-43xj-pf9v/GHSA-m3p6-43xj-pf9v.json
+++ b/advisories/github-reviewed/2023/12/GHSA-m3p6-43xj-pf9v/GHSA-m3p6-43xj-pf9v.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m3p6-43xj-pf9v",
-  "modified": "2023-12-15T03:43:43Z",
+  "modified": "2023-12-18T17:38:29Z",
   "published": "2023-12-14T18:30:21Z",
   "aliases": [
     "CVE-2023-50101"
@@ -9,7 +9,10 @@
   "summary": "Cross-site Scripting in JFinalcms",
   "details": "JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
     {
diff --git a/advisories/github-reviewed/2023/12/GHSA-m8rw-rcpq-2vp2/GHSA-m8rw-rcpq-2vp2.json b/advisories/github-reviewed/2023/12/GHSA-m8rw-rcpq-2vp2/GHSA-m8rw-rcpq-2vp2.json
index 617109e0188..cb692c80fdf 100644
--- a/advisories/github-reviewed/2023/12/GHSA-m8rw-rcpq-2vp2/GHSA-m8rw-rcpq-2vp2.json
+++ b/advisories/github-reviewed/2023/12/GHSA-m8rw-rcpq-2vp2/GHSA-m8rw-rcpq-2vp2.json
@@ -40,13 +40,29 @@
       "type": "WEB",
       "url": "https://github.com/SAP/cloud-security-client-go/security/advisories/GHSA-m8rw-rcpq-2vp2"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/SAP/cloud-security-services-integration-library/security/advisories/GHSA-59c9-pxq8-9c73"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/SAP/cloud-security-client-go/commit/2e3bd63e152e09f267316a1071034eb5d4b7f498"
     },
+    {
+      "type": "WEB",
+      "url": "https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067/"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/SAP/cloud-security-client-go"
+    },
+    {
+      "type": "WEB",
+      "url": "https://me.sap.com/notes/3411067"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2023/12/GHSA-p3ph-6245-4wfc/GHSA-p3ph-6245-4wfc.json b/advisories/github-reviewed/2023/12/GHSA-p3ph-6245-4wfc/GHSA-p3ph-6245-4wfc.json
index d9edf0335e6..7b07225ab0f 100644
--- a/advisories/github-reviewed/2023/12/GHSA-p3ph-6245-4wfc/GHSA-p3ph-6245-4wfc.json
+++ b/advisories/github-reviewed/2023/12/GHSA-p3ph-6245-4wfc/GHSA-p3ph-6245-4wfc.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p3ph-6245-4wfc",
-  "modified": "2023-12-15T03:44:29Z",
+  "modified": "2023-12-18T17:38:33Z",
   "published": "2023-12-14T18:30:21Z",
   "aliases": [
     "CVE-2023-50102"
@@ -9,7 +9,10 @@
   "summary": "Cross-site Scripting in JFinalcms",
   "details": "JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
     {
diff --git a/advisories/github-reviewed/2023/12/GHSA-xv7p-jw46-8r85/GHSA-xv7p-jw46-8r85.json b/advisories/github-reviewed/2023/12/GHSA-xv7p-jw46-8r85/GHSA-xv7p-jw46-8r85.json
index 84d44f6103b..0401e88aa05 100644
--- a/advisories/github-reviewed/2023/12/GHSA-xv7p-jw46-8r85/GHSA-xv7p-jw46-8r85.json
+++ b/advisories/github-reviewed/2023/12/GHSA-xv7p-jw46-8r85/GHSA-xv7p-jw46-8r85.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xv7p-jw46-8r85",
-  "modified": "2023-12-15T03:44:54Z",
+  "modified": "2023-12-18T17:38:38Z",
   "published": "2023-12-14T18:30:21Z",
   "aliases": [
     "CVE-2023-50137"
@@ -9,7 +9,10 @@
   "summary": "Cross-site Scripting in JFinalcms",
   "details": "JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
     {