From 46ef7ce486b3b95db9bc5f27fba3f0149ea52acc Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 14 Apr 2025 20:42:24 +0000 Subject: [PATCH] Publish GHSA-88f6-79x2-xqf3 --- .../GHSA-88f6-79x2-xqf3.json | 29 ++++++++++++++++--- 1 file changed, 25 insertions(+), 4 deletions(-) rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-88f6-79x2-xqf3/GHSA-88f6-79x2-xqf3.json (75%) diff --git a/advisories/unreviewed/2022/05/GHSA-88f6-79x2-xqf3/GHSA-88f6-79x2-xqf3.json b/advisories/github-reviewed/2022/05/GHSA-88f6-79x2-xqf3/GHSA-88f6-79x2-xqf3.json similarity index 75% rename from advisories/unreviewed/2022/05/GHSA-88f6-79x2-xqf3/GHSA-88f6-79x2-xqf3.json rename to advisories/github-reviewed/2022/05/GHSA-88f6-79x2-xqf3/GHSA-88f6-79x2-xqf3.json index c9211694756..c2604b52f51 100644 --- a/advisories/unreviewed/2022/05/GHSA-88f6-79x2-xqf3/GHSA-88f6-79x2-xqf3.json +++ b/advisories/github-reviewed/2022/05/GHSA-88f6-79x2-xqf3/GHSA-88f6-79x2-xqf3.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-88f6-79x2-xqf3", - "modified": "2025-04-12T12:58:17Z", + "modified": "2025-04-14T20:40:30Z", "published": "2022-05-17T03:56:49Z", "aliases": [ "CVE-2016-0710" ], + "summary": "Apache Jetspeed vulnerable to SQL Injection", "details": "Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.", "severity": [ { @@ -13,7 +14,27 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.portals.jetspeed-2:jetspeed" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.3.1" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -53,8 +74,8 @@ "CWE-89" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-04-14T20:40:29Z", "nvd_published_at": "2016-04-11T14:59:00Z" } } \ No newline at end of file