diff --git a/advisories/unreviewed/2024/07/GHSA-fhff-r739-p363/GHSA-fhff-r739-p363.json b/advisories/unreviewed/2024/07/GHSA-fhff-r739-p363/GHSA-fhff-r739-p363.json new file mode 100644 index 00000000000..9b76e4561ba --- /dev/null +++ b/advisories/unreviewed/2024/07/GHSA-fhff-r739-p363/GHSA-fhff-r739-p363.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fhff-r739-p363", + "modified": "2024-07-25T06:30:50Z", + "published": "2024-07-25T06:30:50Z", + "aliases": [ + "CVE-2024-4811" + ], + "details": "In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4811" + }, + { + "type": "WEB", + "url": "https://advisories.octopus.com/post/2024/sa2024-05" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-07-25T05:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/07/GHSA-wx4r-hv2p-gjv3/GHSA-wx4r-hv2p-gjv3.json b/advisories/unreviewed/2024/07/GHSA-wx4r-hv2p-gjv3/GHSA-wx4r-hv2p-gjv3.json new file mode 100644 index 00000000000..1d9aae70a33 --- /dev/null +++ b/advisories/unreviewed/2024/07/GHSA-wx4r-hv2p-gjv3/GHSA-wx4r-hv2p-gjv3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wx4r-hv2p-gjv3", + "modified": "2024-07-25T06:30:51Z", + "published": "2024-07-25T06:30:51Z", + "aliases": [ + "CVE-2024-6972" + ], + "details": "In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the task log in clear-text.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6972" + }, + { + "type": "WEB", + "url": "https://advisories.octopus.com/post/2024/sa2024-06" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-07-25T06:15:01Z" + } +} \ No newline at end of file