From 2ec50a6086703e9565475544111868322b6a5484 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 30 Jan 2024 22:02:39 +0000
Subject: [PATCH] Publish Advisories

GHSA-ffv8-x822-fx73
GHSA-vc2v-34c4-vg9c
---
 .../GHSA-ffv8-x822-fx73.json                  | 30 ++++++++++++++++---
 .../GHSA-vc2v-34c4-vg9c.json                  | 27 ++++++++++++++---
 2 files changed, 49 insertions(+), 8 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json (62%)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json (66%)

diff --git a/advisories/unreviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json b/advisories/github-reviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json
similarity index 62%
rename from advisories/unreviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json
rename to advisories/github-reviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json
index b924fe97dfc..61a4b0ab892 100644
--- a/advisories/unreviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json
+++ b/advisories/github-reviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ffv8-x822-fx73",
-  "modified": "2022-05-13T01:25:15Z",
+  "modified": "2024-01-30T22:00:54Z",
   "published": "2022-05-13T01:25:15Z",
   "aliases": [
     "CVE-2019-1003096"
   ],
+  "summary": "Jenkins TestFairy Plugin stores credentials in plain text",
   "details": "Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.",
   "severity": [
     {
@@ -14,7 +15,28 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.jenkins-ci.plugins:TestFairy"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "4.17.2"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 4.16"
+      }
+    }
   ],
   "references": [
     {
@@ -39,8 +61,8 @@
       "CWE-522"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-30T22:00:54Z",
     "nvd_published_at": "2019-04-04T16:29:00Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json b/advisories/github-reviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json
similarity index 66%
rename from advisories/unreviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json
rename to advisories/github-reviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json
index 03a3218f0ce..9412c7577cf 100644
--- a/advisories/unreviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json
+++ b/advisories/github-reviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vc2v-34c4-vg9c",
-  "modified": "2022-05-13T01:17:42Z",
+  "modified": "2024-01-30T22:00:30Z",
   "published": "2022-05-13T01:17:42Z",
   "aliases": [
     "CVE-2019-1003088"
   ],
+  "summary": "Jenkins Fabric-beta-publisher Plugin stores credentials in plain text",
   "details": "Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "egor-n:fabric-beta-publisher"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "last_affected": "2.1"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -39,8 +58,8 @@
       "CWE-311"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-30T22:00:21Z",
     "nvd_published_at": "2019-04-04T16:29:00Z"
   }
 }
\ No newline at end of file