Publish GHSA-x88j-93vc-wpmp

advisories/github-reviewed/2018/07/GHSA-x88j-93vc-wpmp/GHSA-x88j-93vc-wpmp.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x88j-93vc-wpmp",
-  "modified": "2024-05-16T18:41:00Z",
+  "modified": "2024-09-16T23:03:58Z",
   "published": "2018-07-23T19:52:39Z",
   "aliases": [
     "CVE-2011-4136"
@@ -9,23 +9,30 @@
   "summary": "Session manipulation in Django",
   "details": "django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "django"
+        "name": "Django"
       },
       "ranges": [
         {
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "1.3.0"
+              "introduced": "0"
             },
             {
-              "fixed": "1.3.1"
+              "fixed": "1.2.7"
             }
           ]
         }
@@ -34,17 +41,17 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "django"
+        "name": "Django"
       },
       "ranges": [
         {
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "1.2.0"
+              "introduced": "1.3"
             },
             {
-              "fixed": "1.2.7"
+              "fixed": "1.3.1"
             }
           ]
         }
@@ -76,6 +83,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/django/django"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-1.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://hermes.opensuse.org/messages/14700881"
@@ -96,10 +107,6 @@
       "type": "WEB",
       "url": "http://openwall.com/lists/oss-security/2011/09/13/2"
     },
-    {
-      "type": "WEB",
-      "url": "http://secunia.com/advisories/46614"
-    },
     {
       "type": "WEB",
       "url": "http://www.debian.org/security/2011/dsa-2332"