From 46904ac54f090c944bbbbd4c6c207a19bd6ef7ba Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 27 Jun 2023 17:16:24 +0000
Subject: [PATCH] Publish Advisories

GHSA-ff3m-68vj-h86p
GHSA-p2mf-q26j-3xmh
---
 .../GHSA-ff3m-68vj-h86p.json                  | 31 ++++++++++++++++---
 .../GHSA-p2mf-q26j-3xmh.json                  | 31 ++++++++++++++++---
 2 files changed, 54 insertions(+), 8 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json (58%)
 rename advisories/{unreviewed => github-reviewed}/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json (58%)

diff --git a/advisories/unreviewed/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json b/advisories/github-reviewed/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json
similarity index 58%
rename from advisories/unreviewed/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json
rename to advisories/github-reviewed/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json
index 09f2c99bd97..01128c16540 100644
--- a/advisories/unreviewed/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json
+++ b/advisories/github-reviewed/2023/06/GHSA-ff3m-68vj-h86p/GHSA-ff3m-68vj-h86p.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ff3m-68vj-h86p",
-  "modified": "2023-06-27T15:30:29Z",
+  "modified": "2023-06-27T17:15:16Z",
   "published": "2023-06-27T15:30:29Z",
   "aliases": [
     "CVE-2023-3432"
   ],
+  "summary": "PlantUML Server-Side Request Forgery vulnerability",
   "details": "Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "net.sourceforge.plantuml:plantuml-mit"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.2023.9"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -25,6 +44,10 @@
       "type": "WEB",
       "url": "https://github.com/plantuml/plantuml/commit/b32500bb61ae617bb312496d6d832e4be8190797"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/plantuml/plantuml"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.dev/bounties/8ac3316f-431c-468d-87e4-3dafff2ecf51"
@@ -35,8 +58,8 @@
       "CWE-918"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-06-27T17:15:16Z",
     "nvd_published_at": null
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json b/advisories/github-reviewed/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json
similarity index 58%
rename from advisories/unreviewed/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json
rename to advisories/github-reviewed/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json
index 35f10160bf0..c319e187560 100644
--- a/advisories/unreviewed/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json
+++ b/advisories/github-reviewed/2023/06/GHSA-p2mf-q26j-3xmh/GHSA-p2mf-q26j-3xmh.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p2mf-q26j-3xmh",
-  "modified": "2023-06-27T15:30:28Z",
+  "modified": "2023-06-27T17:15:10Z",
   "published": "2023-06-27T15:30:28Z",
   "aliases": [
     "CVE-2023-3431"
   ],
+  "summary": "PlantUML Improper Access Control vulnerability",
   "details": "Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "net.sourceforge.plantuml:plantuml-mit"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.2023.9"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -25,6 +44,10 @@
       "type": "WEB",
       "url": "https://github.com/plantuml/plantuml/commit/fbe7fa3b25b4c887d83927cffb1009ec6cb8ab1e"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/plantuml/plantuml"
+    },
     {
       "type": "WEB",
       "url": "https://huntr.dev/bounties/fa741f95-b53c-4ed7-b157-e32c5145164c"
@@ -35,8 +58,8 @@
       "CWE-284"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-06-27T17:15:10Z",
     "nvd_published_at": null
   }
 }
\ No newline at end of file