diff --git a/advisories/unreviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json b/advisories/github-reviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json similarity index 67% rename from advisories/unreviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json rename to advisories/github-reviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json index 2254975d5be..f2132fd6c37 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json +++ b/advisories/github-reviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-6pj9-5q6j-j97c", - "modified": "2022-05-13T01:25:16Z", + "modified": "2024-01-30T21:50:39Z", "published": "2022-05-13T01:25:16Z", "aliases": [ "CVE-2019-1003083" ], + "summary": "Missing permission check in Jenkins Gearman Plugin", "details": "A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:gearman-plugin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.4.0" + } + ] + } + ] + } ], "references": [ { @@ -39,8 +58,8 @@ "CWE-862" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:50:39Z", "nvd_published_at": "2019-04-04T16:29:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json b/advisories/github-reviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json similarity index 65% rename from advisories/unreviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json rename to advisories/github-reviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json index f93762da293..e48a86ad298 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json +++ b/advisories/github-reviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-g2rp-qwrq-qqqq", - "modified": "2022-05-13T01:17:42Z", + "modified": "2024-01-30T21:50:19Z", "published": "2022-05-13T01:17:42Z", "aliases": [ "CVE-2019-1003094" ], + "summary": "Jenkins Open STF Plugin stores credentials in plain text ", "details": "Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:open-stf" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "1.0.9" + } + ] + } + ] + } ], "references": [ { @@ -39,8 +58,8 @@ "CWE-311" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:50:19Z", "nvd_published_at": "2019-04-04T16:29:00Z" } } \ No newline at end of file