From 53182e746d8326839254679a3a4fdb7d42a03173 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 28 Dec 2023 23:23:17 +0000 Subject: [PATCH] Publish GHSA-4prj-vw9j-v6pr --- .../GHSA-4prj-vw9j-v6pr.json | 43 ++++++++++++++++++- 1 file changed, 41 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2022/05/GHSA-4prj-vw9j-v6pr/GHSA-4prj-vw9j-v6pr.json b/advisories/github-reviewed/2022/05/GHSA-4prj-vw9j-v6pr/GHSA-4prj-vw9j-v6pr.json index 3538812b51d..f5d25765eea 100644 --- a/advisories/github-reviewed/2022/05/GHSA-4prj-vw9j-v6pr/GHSA-4prj-vw9j-v6pr.json +++ b/advisories/github-reviewed/2022/05/GHSA-4prj-vw9j-v6pr/GHSA-4prj-vw9j-v6pr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4prj-vw9j-v6pr", - "modified": "2022-11-03T19:08:44Z", + "modified": "2023-12-28T23:22:04Z", "published": "2022-05-14T00:54:13Z", "aliases": [ "CVE-2016-4438" @@ -25,7 +25,26 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "2.3.19" + }, + { + "fixed": "2.3.29" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.struts:struts2-rest-plugin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.3.19" }, { "fixed": "2.3.29" @@ -40,10 +59,30 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4438" }, + { + "type": "WEB", + "url": "https://github.com/apache/struts/commit/6d7ac40dcede1793a4534a3dc249fd562d495e8c" + }, + { + "type": "WEB", + "url": "https://github.com/apache/struts/commit/76eb8f38a33ad0f1f48464ee1311559c8d52dd6d" + }, + { + "type": "WEB", + "url": "https://github.com/apache/struts/commit/c9c21378f2fb2ff21355c128c45e106ebd87ad7c" + }, + { + "type": "WEB", + "url": "https://github.com/apache/struts/commit/deefeffd11425f0cd0b797cd86a9b3550234262b" + }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1348238" }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/struts" + }, { "type": "WEB", "url": "https://struts.apache.org/docs/s2-037.html"