From 3c32737b560cc290c37d026a86b408605da9a617 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 10 Jan 2024 17:06:13 +0000
Subject: [PATCH] Publish Advisories

GHSA-rj4f-cp4v-hvcv
GHSA-rj4f-cp4v-hvcv
---
 .../GHSA-rj4f-cp4v-hvcv.json                  | 80 +++++++++++++++++++
 .../GHSA-rj4f-cp4v-hvcv.json                  | 35 --------
 2 files changed, 80 insertions(+), 35 deletions(-)
 create mode 100644 advisories/github-reviewed/2022/05/GHSA-rj4f-cp4v-hvcv/GHSA-rj4f-cp4v-hvcv.json
 delete mode 100644 advisories/unreviewed/2022/05/GHSA-rj4f-cp4v-hvcv/GHSA-rj4f-cp4v-hvcv.json

diff --git a/advisories/github-reviewed/2022/05/GHSA-rj4f-cp4v-hvcv/GHSA-rj4f-cp4v-hvcv.json b/advisories/github-reviewed/2022/05/GHSA-rj4f-cp4v-hvcv/GHSA-rj4f-cp4v-hvcv.json
new file mode 100644
index 00000000000..efbc9ce468c
--- /dev/null
+++ b/advisories/github-reviewed/2022/05/GHSA-rj4f-cp4v-hvcv/GHSA-rj4f-cp4v-hvcv.json
@@ -0,0 +1,80 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rj4f-cp4v-hvcv",
+  "modified": "2024-01-10T17:04:47Z",
+  "published": "2022-05-24T17:41:56Z",
+  "aliases": [
+    "CVE-2021-21024"
+  ],
+  "summary": "Magento Blind SQL Injection in the Search module",
+  "details": "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a blind SQL injection vulnerability in the Search module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "magento/community-edition"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.3.6-p1"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "magento/community-edition"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.4.0"
+            },
+            {
+              "fixed": "2.4.1-p1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21024"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/magento/magento2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://helpx.adobe.com/security/products/magento/apsb21-08.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-10T17:04:47Z",
+    "nvd_published_at": "2021-02-11T20:15:00Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-rj4f-cp4v-hvcv/GHSA-rj4f-cp4v-hvcv.json b/advisories/unreviewed/2022/05/GHSA-rj4f-cp4v-hvcv/GHSA-rj4f-cp4v-hvcv.json
deleted file mode 100644
index 59bd909a4f8..00000000000
--- a/advisories/unreviewed/2022/05/GHSA-rj4f-cp4v-hvcv/GHSA-rj4f-cp4v-hvcv.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-rj4f-cp4v-hvcv",
-  "modified": "2022-05-24T17:41:56Z",
-  "published": "2022-05-24T17:41:56Z",
-  "aliases": [
-    "CVE-2021-21024"
-  ],
-  "details": "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a blind SQL injection vulnerability in the Search module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation.",
-  "severity": [
-
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21024"
-    },
-    {
-      "type": "WEB",
-      "url": "https://helpx.adobe.com/security/products/magento/apsb21-08.html"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-89"
-    ],
-    "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2021-02-11T20:15:00Z"
-  }
-}
\ No newline at end of file