Publish Advisories

GHSA-m7gr-5w5g-36jf
GHSA-7qwj-gcjf-828f
GHSA-7qwj-gcjf-828f

advisories/github-reviewed/2022/07/GHSA-m7gr-5w5g-36jf/GHSA-m7gr-5w5g-36jf.json

@@ -1,13 +1,14 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m7gr-5w5g-36jf",
-  "modified": "2022-07-29T13:06:38Z",
+  "modified": "2024-05-06T14:22:01Z",
   "published": "2022-07-23T00:00:22Z",
+  "withdrawn": "2024-05-06T14:22:01Z",
   "aliases": [
     "CVE-2022-34037"
   ],
-  "summary": "Out-of-bounds Read can lead to client side denial of service",
-  "details": "An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) on the client side via a crafted URI.\n\nAccording to the maintainer, the bug only affects the client side of the request and cannot cause a denial of service on the server.",
+  "summary": "Withdrawn Advisory: Out-of-bounds Read can lead to client side denial of service",
+  "details": "## Withdrawn Advisory\nThis advisory has been withdrawn because it is a bug, not a vulnerability. According to the maintainer, the bug only affects the client side of the request and cannot cause a denial of service on the server.\n\n## Original Description\nAn out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) on the client side via a crafted URI.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -44,6 +45,10 @@
       "type": "WEB",
       "url": "https://github.com/caddyserver/caddy/issues/4775"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/caddyserver/caddy/issues/4775#issuecomment-1203388116"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/caddyserver/caddy/commit/693e9b5283e675b56084ecc83d73176cab0ee27c"

advisories/github-reviewed/2024/05/GHSA-7qwj-gcjf-828f/GHSA-7qwj-gcjf-828f.json

@@ -0,0 +1,62 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7qwj-gcjf-828f",
+  "modified": "2024-05-06T14:22:19Z",
+  "published": "2024-05-04T06:30:31Z",
+  "aliases": [
+    "CVE-2024-34460"
+  ],
+  "summary": "Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting",
+  "details": "The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. (This component was removed in 9.5.60602.)",
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "tribalsystems/zenario"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "9.5.60602"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34460"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/TribalSystems/Zenario/commit/121ff6dc6c1c13e8281f078ecde47455b383ee78"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/TribalSystems/Zenario"
+    },
+    {
+      "type": "WEB",
+      "url": "https://zenar.io/zenario-9/blog/zenario-9560602-patch-released"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-05-06T14:22:19Z",
+    "nvd_published_at": "2024-05-04T05:15:06Z"
+  }
+}

advisories/unreviewed/2024/05/GHSA-7qwj-gcjf-828f/GHSA-7qwj-gcjf-828f.json

@@ -1,35 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-7qwj-gcjf-828f",
-  "modified": "2024-05-04T06:30:31Z",
-  "published": "2024-05-04T06:30:31Z",
-  "aliases": [
-    "CVE-2024-34460"
-  ],
-  "details": "The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. (This component was removed in 9.5.60602.)",
-  "severity": [
-
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34460"
-    },
-    {
-      "type": "WEB",
-      "url": "https://zenar.io/zenario-9/blog/zenario-9560602-patch-released"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-
-    ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2024-05-04T05:15:06Z"
-  }
-}