diff --git a/advisories/unreviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json b/advisories/github-reviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json similarity index 62% rename from advisories/unreviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json rename to advisories/github-reviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json index b924fe97dfc..61a4b0ab892 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json +++ b/advisories/github-reviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-ffv8-x822-fx73", - "modified": "2022-05-13T01:25:15Z", + "modified": "2024-01-30T22:00:54Z", "published": "2022-05-13T01:25:15Z", "aliases": [ "CVE-2019-1003096" ], + "summary": "Jenkins TestFairy Plugin stores credentials in plain text", "details": "Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.", "severity": [ { @@ -14,7 +15,28 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:TestFairy" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "4.17.2" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 4.16" + } + } ], "references": [ { @@ -39,8 +61,8 @@ "CWE-522" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T22:00:54Z", "nvd_published_at": "2019-04-04T16:29:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json b/advisories/github-reviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json similarity index 66% rename from advisories/unreviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json rename to advisories/github-reviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json index 03a3218f0ce..9412c7577cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json +++ b/advisories/github-reviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-vc2v-34c4-vg9c", - "modified": "2022-05-13T01:17:42Z", + "modified": "2024-01-30T22:00:30Z", "published": "2022-05-13T01:17:42Z", "aliases": [ "CVE-2019-1003088" ], + "summary": "Jenkins Fabric-beta-publisher Plugin stores credentials in plain text", "details": "Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "egor-n:fabric-beta-publisher" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "2.1" + } + ] + } + ] + } ], "references": [ { @@ -39,8 +58,8 @@ "CWE-311" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T22:00:21Z", "nvd_published_at": "2019-04-04T16:29:00Z" } } \ No newline at end of file