Publish Advisories

GHSA-xx8f-qf9f-5fgw
GHSA-2qm5-r82g-5hcx

advisories/github-reviewed/2021/06/GHSA-xx8f-qf9f-5fgw/GHSA-xx8f-qf9f-5fgw.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xx8f-qf9f-5fgw",
-  "modified": "2023-09-11T15:00:57Z",
+  "modified": "2024-04-22T19:04:05Z",
   "published": "2021-06-08T20:11:19Z",
   "aliases": [
     "CVE-2021-3007"

advisories/github-reviewed/2022/05/GHSA-2qm5-r82g-5hcx/GHSA-2qm5-r82g-5hcx.json

@@ -1,17 +1,29 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2qm5-r82g-5hcx",
-  "modified": "2022-05-24T17:28:15Z",
+  "modified": "2024-04-22T19:03:52Z",
   "published": "2022-05-24T17:28:15Z",
   "aliases": [
     "CVE-2020-25540"
   ],
+  "summary": "ThinkAdmin directory traversal vulnerability",
   "details": "ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "zoujingli/thinkadmin"
+      },
+      "versions": [
+        "6.0"
+      ]
+    }
   ],
   "references": [
     {
@@ -33,11 +45,11 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-22"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-04-22T19:03:52Z",
     "nvd_published_at": "2020-09-14T13:15:00Z"
   }
 }