From 2994fe5cd8f14b37771c5d21b681147623a3b29b Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 30 Jan 2024 21:51:37 +0000
Subject: [PATCH] Publish Advisories

GHSA-6pj9-5q6j-j97c
GHSA-g2rp-qwrq-qqqq
---
 .../GHSA-6pj9-5q6j-j97c.json                  | 27 ++++++++++++++++---
 .../GHSA-g2rp-qwrq-qqqq.json                  | 27 ++++++++++++++++---
 2 files changed, 46 insertions(+), 8 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json (67%)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json (65%)

diff --git a/advisories/unreviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json b/advisories/github-reviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json
similarity index 67%
rename from advisories/unreviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json
rename to advisories/github-reviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json
index 2254975d5be..f2132fd6c37 100644
--- a/advisories/unreviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json
+++ b/advisories/github-reviewed/2022/05/GHSA-6pj9-5q6j-j97c/GHSA-6pj9-5q6j-j97c.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6pj9-5q6j-j97c",
-  "modified": "2022-05-13T01:25:16Z",
+  "modified": "2024-01-30T21:50:39Z",
   "published": "2022-05-13T01:25:16Z",
   "aliases": [
     "CVE-2019-1003083"
   ],
+  "summary": "Missing permission check in Jenkins Gearman Plugin",
   "details": "A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.jenkins-ci.plugins:gearman-plugin"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.4.0"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -39,8 +58,8 @@
       "CWE-862"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-30T21:50:39Z",
     "nvd_published_at": "2019-04-04T16:29:00Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json b/advisories/github-reviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json
similarity index 65%
rename from advisories/unreviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json
rename to advisories/github-reviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json
index f93762da293..e48a86ad298 100644
--- a/advisories/unreviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json
+++ b/advisories/github-reviewed/2022/05/GHSA-g2rp-qwrq-qqqq/GHSA-g2rp-qwrq-qqqq.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g2rp-qwrq-qqqq",
-  "modified": "2022-05-13T01:17:42Z",
+  "modified": "2024-01-30T21:50:19Z",
   "published": "2022-05-13T01:17:42Z",
   "aliases": [
     "CVE-2019-1003094"
   ],
+  "summary": "Jenkins Open STF Plugin stores credentials in plain text ",
   "details": "Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.jenkins-ci.plugins:open-stf"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "1.0.9"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -39,8 +58,8 @@
       "CWE-311"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-30T21:50:19Z",
     "nvd_published_at": "2019-04-04T16:29:00Z"
   }
 }
\ No newline at end of file