diff --git a/advisories/github-reviewed/2024/12/GHSA-2p6p-9rc9-62j9/GHSA-2p6p-9rc9-62j9.json b/advisories/github-reviewed/2024/12/GHSA-2p6p-9rc9-62j9/GHSA-2p6p-9rc9-62j9.json index a15617a7eee..d73d7f548ed 100644 --- a/advisories/github-reviewed/2024/12/GHSA-2p6p-9rc9-62j9/GHSA-2p6p-9rc9-62j9.json +++ b/advisories/github-reviewed/2024/12/GHSA-2p6p-9rc9-62j9/GHSA-2p6p-9rc9-62j9.json @@ -1,14 +1,19 @@ { "schema_version": "1.4.0", "id": "GHSA-2p6p-9rc9-62j9", - "modified": "2024-12-18T19:47:26Z", + "modified": "2024-12-18T21:53:04Z", "published": "2024-12-18T19:47:26Z", "aliases": [ "CVE-2024-56145" ], "summary": "Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled", "details": "### Impact\nYou are affected if your php.ini configuration has `register_argc_argv` enabled.\n\n### Patches\nUpdate to 4.13.2 or 5.5.2.\n\n### Workarounds\nIf you can't upgrade yet, and `register_argc_argv` is enabled, you can disable it to mitigate the issue.", - "severity": [], + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" + } + ], "affected": [ { "package": { @@ -54,6 +59,10 @@ "type": "WEB", "url": "https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56145" + }, { "type": "WEB", "url": "https://github.com/craftcms/cms/commit/82e893fb794d30563da296bca31379c0df0079b3" @@ -65,11 +74,12 @@ ], "database_specific": { "cwe_ids": [ - "CWE-78" + "CWE-78", + "CWE-94" ], - "severity": "HIGH", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-12-18T19:47:26Z", - "nvd_published_at": null + "nvd_published_at": "2024-12-18T21:15:08Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2024/12/GHSA-c4pw-33h3-35xw/GHSA-c4pw-33h3-35xw.json b/advisories/github-reviewed/2024/12/GHSA-c4pw-33h3-35xw/GHSA-c4pw-33h3-35xw.json index b7d921b4bba..c23509b8e04 100644 --- a/advisories/github-reviewed/2024/12/GHSA-c4pw-33h3-35xw/GHSA-c4pw-33h3-35xw.json +++ b/advisories/github-reviewed/2024/12/GHSA-c4pw-33h3-35xw/GHSA-c4pw-33h3-35xw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-c4pw-33h3-35xw", - "modified": "2024-12-18T15:02:37Z", + "modified": "2024-12-18T21:52:48Z", "published": "2024-12-18T15:02:37Z", "aliases": [ "CVE-2024-56140" @@ -40,10 +40,18 @@ "type": "WEB", "url": "https://github.com/withastro/astro/security/advisories/GHSA-c4pw-33h3-35xw" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56140" + }, { "type": "WEB", "url": "https://github.com/withastro/astro/commit/e7d14c374b9d45e27089994a4eb72186d05514de" }, + { + "type": "WEB", + "url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#simple_requests" + }, { "type": "PACKAGE", "url": "https://github.com/withastro/astro" @@ -60,6 +68,6 @@ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-12-18T15:02:37Z", - "nvd_published_at": null + "nvd_published_at": "2024-12-18T21:15:08Z" } } \ No newline at end of file