From 3717876684da749d12908c2682eadb76bd471c01 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 4 Sep 2024 20:44:16 +0000 Subject: [PATCH] Publish GHSA-vcg8-98q8-g7mj --- .../GHSA-vcg8-98q8-g7mj.json | 32 ++++++++++++++++--- 1 file changed, 28 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2021/04/GHSA-vcg8-98q8-g7mj/GHSA-vcg8-98q8-g7mj.json b/advisories/github-reviewed/2021/04/GHSA-vcg8-98q8-g7mj/GHSA-vcg8-98q8-g7mj.json index 188ffca00b7..f641e04a41f 100644 --- a/advisories/github-reviewed/2021/04/GHSA-vcg8-98q8-g7mj/GHSA-vcg8-98q8-g7mj.json +++ b/advisories/github-reviewed/2021/04/GHSA-vcg8-98q8-g7mj/GHSA-vcg8-98q8-g7mj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vcg8-98q8-g7mj", - "modified": "2021-08-31T21:10:59Z", + "modified": "2024-09-04T20:42:49Z", "published": "2021-04-07T21:47:31Z", "aliases": [ "CVE-2020-1740" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -44,7 +48,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "2.8.0" + "introduced": "2.8.0a1" }, { "fixed": "2.8.11" @@ -63,7 +67,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "2.9.0" + "introduced": "2.9.0a1" }, { "fixed": "2.9.7" @@ -86,14 +90,34 @@ "type": "WEB", "url": "https://github.com/ansible/ansible/commit/28f9fbdb5e281976e33f443193047068afb97a9b" }, + { + "type": "WEB", + "url": "https://github.com/ansible/ansible/commit/2a563514f070a0a8ba64aebf6bce21194be96c73" + }, + { + "type": "WEB", + "url": "https://github.com/ansible/ansible/commit/685a4b6d3ff72186d2b4ffce73172a5446a71ccc" + }, + { + "type": "WEB", + "url": "https://github.com/ansible/ansible/commit/ef32a5bf96a89107986375516285253c1380d7ef" + }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-vcg8-98q8-g7mj" + }, { "type": "PACKAGE", "url": "https://github.com/ansible/ansible" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-12.yaml" + }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html" @@ -120,7 +144,7 @@ "CWE-200", "CWE-377" ], - "severity": "LOW", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-04-05T15:41:07Z", "nvd_published_at": "2020-03-16T16:15:00Z"