From 4693c1e200019eb420e520a594edb141ab77077a Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 7 Aug 2024 16:03:05 +0000 Subject: [PATCH] Publish Advisories GHSA-r7cm-g469-wm4g GHSA-wxcx-gg9c-fwp2 --- .../GHSA-r7cm-g469-wm4g.json | 18 +++++++++++++++++- .../GHSA-wxcx-gg9c-fwp2.json | 8 ++++---- 2 files changed, 21 insertions(+), 5 deletions(-) diff --git a/advisories/github-reviewed/2024/06/GHSA-r7cm-g469-wm4g/GHSA-r7cm-g469-wm4g.json b/advisories/github-reviewed/2024/06/GHSA-r7cm-g469-wm4g/GHSA-r7cm-g469-wm4g.json index 1e7f7c55db6..ef6bbd5572a 100644 --- a/advisories/github-reviewed/2024/06/GHSA-r7cm-g469-wm4g/GHSA-r7cm-g469-wm4g.json +++ b/advisories/github-reviewed/2024/06/GHSA-r7cm-g469-wm4g/GHSA-r7cm-g469-wm4g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r7cm-g469-wm4g", - "modified": "2024-08-07T15:58:26Z", + "modified": "2024-08-07T16:02:05Z", "published": "2024-06-13T09:31:00Z", "aliases": [ "CVE-2024-34107" @@ -118,6 +118,22 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34107" }, + { + "type": "WEB", + "url": "https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799" + }, + { + "type": "WEB", + "url": "https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2" + }, + { + "type": "WEB", + "url": "https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c" + }, + { + "type": "WEB", + "url": "https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482" + }, { "type": "PACKAGE", "url": "https://github.com/magento/magento2" diff --git a/advisories/github-reviewed/2024/07/GHSA-wxcx-gg9c-fwp2/GHSA-wxcx-gg9c-fwp2.json b/advisories/github-reviewed/2024/07/GHSA-wxcx-gg9c-fwp2/GHSA-wxcx-gg9c-fwp2.json index 02744aa8137..1089a508360 100644 --- a/advisories/github-reviewed/2024/07/GHSA-wxcx-gg9c-fwp2/GHSA-wxcx-gg9c-fwp2.json +++ b/advisories/github-reviewed/2024/07/GHSA-wxcx-gg9c-fwp2/GHSA-wxcx-gg9c-fwp2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wxcx-gg9c-fwp2", - "modified": "2024-07-19T14:18:15Z", + "modified": "2024-08-07T16:01:12Z", "published": "2024-07-18T22:03:30Z", "aliases": [ "CVE-2024-35198" @@ -11,11 +11,11 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -70,7 +70,7 @@ "CWE-22", "CWE-706" ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-07-18T22:03:30Z", "nvd_published_at": "2024-07-19T02:15:14Z"