From 66ab6b49dcebc51128c99664939deab6a418c6ab Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Thu, 20 Mar 2025 19:42:39 +0000
Subject: [PATCH] Publish Advisories

GHSA-36gf-vpj2-j42w
GHSA-mpg8-8x9c-p9gv
---
 .../2024/06/GHSA-36gf-vpj2-j42w/GHSA-36gf-vpj2-j42w.json  | 8 ++++++--
 .../2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json  | 3 ++-
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/advisories/github-reviewed/2024/06/GHSA-36gf-vpj2-j42w/GHSA-36gf-vpj2-j42w.json b/advisories/github-reviewed/2024/06/GHSA-36gf-vpj2-j42w/GHSA-36gf-vpj2-j42w.json
index 07be742b99b..e89b5cac0b0 100644
--- a/advisories/github-reviewed/2024/06/GHSA-36gf-vpj2-j42w/GHSA-36gf-vpj2-j42w.json
+++ b/advisories/github-reviewed/2024/06/GHSA-36gf-vpj2-j42w/GHSA-36gf-vpj2-j42w.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-36gf-vpj2-j42w",
-  "modified": "2024-06-24T21:31:14Z",
+  "modified": "2025-03-20T19:41:59Z",
   "published": "2024-06-24T09:30:53Z",
   "aliases": [
     "CVE-2024-27136"
   ],
   "summary": "Cross site scripting in Apache JSPWiki",
-  "details": "XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.  Apache JSPWiki users should upgrade to 2.12.2 or later. ",
+  "details": "XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.  Apache JSPWiki users should upgrade to 2.12.2 or later.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -55,6 +55,10 @@
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread/gfms8gbncqqkj52p861b8fnsypwsl1d5"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2024/06/23/3"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json b/advisories/github-reviewed/2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json
index 3e23a570379..4339583e0a9 100644
--- a/advisories/github-reviewed/2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json
+++ b/advisories/github-reviewed/2025/02/GHSA-mpg8-8x9c-p9gv/GHSA-mpg8-8x9c-p9gv.json
@@ -55,7 +55,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-269"
+      "CWE-269",
+      "CWE-276"
     ],
     "severity": "CRITICAL",
     "github_reviewed": true,