Publish Advisories

GHSA-ffpv-c4hm-3x6v
GHSA-6h8x-73fx-q2h9

advisories/github-reviewed/2017/10/GHSA-ffpv-c4hm-3x6v/GHSA-ffpv-c4hm-3x6v.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ffpv-c4hm-3x6v",
-  "modified": "2022-04-25T20:50:13Z",
+  "modified": "2023-07-31T21:08:45Z",
   "published": "2017-10-24T18:33:35Z",
   "aliases": [
     "CVE-2016-0751"
@@ -88,13 +88,41 @@
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751"
     },
     {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-ffpv-c4hm-3x6v"
+      "type": "WEB",
+      "url": "https://github.com/rails/rails/commit/127967b735813cd4f263df7a50426d74e7e9cc17"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rails/rails/commit/221937c8ba1d291430ceddebbd4bdef7d3cb47d6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rails/rails/commit/37047b779a177b911c7161052cfc34a30e1db0af"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/rails/rails"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-0751.yml"
+    },
+    {
+      "type": "WEB",
+      "url": "https://groups.google.com/forum/#!topic/rubyonrails-security/9oLY_FCzvoc"
     },
     {
       "type": "WEB",
       "url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/9oLY_FCzvoc/5CDXbvpYEgAJ"
     },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20160128201702/http://www.securitytracker.com/id/1034816"
+    },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20200227181647/http://www.securityfocus.com/bid/81800"
+    },
     {
       "type": "WEB",
       "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html"
@@ -126,14 +154,6 @@
     {
       "type": "WEB",
       "url": "http://www.openwall.com/lists/oss-security/2016/01/25/9"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/81800"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securitytracker.com/id/1034816"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2022/05/GHSA-6h8x-73fx-q2h9/GHSA-6h8x-73fx-q2h9.json

@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6h8x-73fx-q2h9",
-  "modified": "2022-05-17T02:57:32Z",
+  "modified": "2023-07-31T21:08:39Z",
   "published": "2022-05-17T02:57:32Z",
   "aliases": [
     "CVE-2016-4043"
   ],
+  "summary": "Chameleon in Plone allows Authentication Bypass",
   "details": "Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "plone"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "5.0rc1"
+            },
+            {
+              "last_affected": "5.1a1"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -35,8 +54,8 @@
 
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-07-31T21:08:39Z",
     "nvd_published_at": "2017-02-24T20:59:00Z"
   }
 }