From 30511bccee59f107a8bae4e2af225c17578ed0e9 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 13 Feb 2025 16:46:08 +0000 Subject: [PATCH] Publish GHSA-572q-86rr-5vgq --- .../01/GHSA-572q-86rr-5vgq/GHSA-572q-86rr-5vgq.json | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2025/01/GHSA-572q-86rr-5vgq/GHSA-572q-86rr-5vgq.json b/advisories/github-reviewed/2025/01/GHSA-572q-86rr-5vgq/GHSA-572q-86rr-5vgq.json index bdd16b1b594..797d3194a27 100644 --- a/advisories/github-reviewed/2025/01/GHSA-572q-86rr-5vgq/GHSA-572q-86rr-5vgq.json +++ b/advisories/github-reviewed/2025/01/GHSA-572q-86rr-5vgq/GHSA-572q-86rr-5vgq.json @@ -1,13 +1,14 @@ { "schema_version": "1.4.0", "id": "GHSA-572q-86rr-5vgq", - "modified": "2025-02-07T20:39:55Z", + "modified": "2025-02-13T16:44:45Z", "published": "2025-01-22T18:31:55Z", + "withdrawn": "2025-02-13T16:44:44Z", "aliases": [ "CVE-2024-55488" ], - "summary": "Umbraco Rich Text Display allows Cross-Site Scripting", - "details": "A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.", + "summary": "Withdrawn Advisory: Umbraco Rich Text Display allows Cross-Site Scripting", + "details": "# Withdrawn Advisory\nThis advisory has been withdrawn because the issue is a [documented security](https://docs.umbraco.com/umbraco-cms/reference/security/serverside-sanitizing). This link is maintained to preserve external references. For more information, see https://github.com/github/advisory-database/pull/5270.\n\n# Original Advisory\nA stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.", "severity": [ { "type": "CVSS_V3", @@ -40,6 +41,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55488" }, + { + "type": "WEB", + "url": "https://github.com/github/advisory-database/pull/5270" + }, { "type": "WEB", "url": "https://github.com/umbraco/Umbraco-CMS/pull/17164"