diff --git a/advisories/github-reviewed/2020/09/GHSA-x7gm-rfgv-w973/GHSA-x7gm-rfgv-w973.json b/advisories/github-reviewed/2020/09/GHSA-x7gm-rfgv-w973/GHSA-x7gm-rfgv-w973.json index f63d8c61e82..78c4c1236f3 100644 --- a/advisories/github-reviewed/2020/09/GHSA-x7gm-rfgv-w973/GHSA-x7gm-rfgv-w973.json +++ b/advisories/github-reviewed/2020/09/GHSA-x7gm-rfgv-w973/GHSA-x7gm-rfgv-w973.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-x7gm-rfgv-w973", - "modified": "2022-01-06T20:22:25Z", + "modified": "2024-09-16T22:10:02Z", "published": "2020-09-28T19:05:29Z", "aliases": [ "CVE-2020-15225" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -56,6 +60,10 @@ "type": "WEB", "url": "https://github.com/carltongibson/django-filter/releases/tag/2.4.0" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django-filter/PYSEC-2021-64.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DPHENTRHRAYFXYPPBT7JRHZRWILRY44S" diff --git a/advisories/github-reviewed/2022/05/GHSA-9xg7-gg9m-rmq9/GHSA-9xg7-gg9m-rmq9.json b/advisories/github-reviewed/2022/05/GHSA-9xg7-gg9m-rmq9/GHSA-9xg7-gg9m-rmq9.json index d61177f559e..da0db62d4ef 100644 --- a/advisories/github-reviewed/2022/05/GHSA-9xg7-gg9m-rmq9/GHSA-9xg7-gg9m-rmq9.json +++ b/advisories/github-reviewed/2022/05/GHSA-9xg7-gg9m-rmq9/GHSA-9xg7-gg9m-rmq9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9xg7-gg9m-rmq9", - "modified": "2024-02-08T21:27:24Z", + "modified": "2024-09-16T22:08:51Z", "published": "2022-05-02T03:37:17Z", "aliases": [ "CVE-2009-2659" @@ -9,7 +9,14 @@ "summary": "Django Admin Media Handler Vulnerable to Directory Traversal", "details": "The Admin media handler in `core/servers/basehttp.py` in Django 1.0 and 0.96 does not properly map URL requests to expected \"static media files,\" which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -68,6 +75,10 @@ "type": "PACKAGE", "url": "https://github.com/django/django" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2009-3.yaml" + }, { "type": "WEB", "url": "https://web.archive.org/web/20111211001428/http://www.securityfocus.com/bid/35859" @@ -101,7 +112,7 @@ "cwe_ids": [ "CWE-22" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-02-08T21:27:24Z", "nvd_published_at": "2009-08-04T16:30:00Z" diff --git a/advisories/github-reviewed/2022/10/GHSA-vw39-2wj9-4q86/GHSA-vw39-2wj9-4q86.json b/advisories/github-reviewed/2022/10/GHSA-vw39-2wj9-4q86/GHSA-vw39-2wj9-4q86.json index a1f35c056d0..ee822d1252a 100644 --- a/advisories/github-reviewed/2022/10/GHSA-vw39-2wj9-4q86/GHSA-vw39-2wj9-4q86.json +++ b/advisories/github-reviewed/2022/10/GHSA-vw39-2wj9-4q86/GHSA-vw39-2wj9-4q86.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vw39-2wj9-4q86", - "modified": "2022-10-11T20:49:45Z", + "modified": "2024-09-16T22:09:24Z", "published": "2022-10-11T19:00:29Z", "aliases": [ "CVE-2022-42731" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [