diff --git a/advisories/github-reviewed/2017/10/GHSA-ffpv-c4hm-3x6v/GHSA-ffpv-c4hm-3x6v.json b/advisories/github-reviewed/2017/10/GHSA-ffpv-c4hm-3x6v/GHSA-ffpv-c4hm-3x6v.json index 40aa2a655ca..174ca3a22bd 100644 --- a/advisories/github-reviewed/2017/10/GHSA-ffpv-c4hm-3x6v/GHSA-ffpv-c4hm-3x6v.json +++ b/advisories/github-reviewed/2017/10/GHSA-ffpv-c4hm-3x6v/GHSA-ffpv-c4hm-3x6v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-ffpv-c4hm-3x6v", - "modified": "2022-04-25T20:50:13Z", + "modified": "2023-07-31T21:08:45Z", "published": "2017-10-24T18:33:35Z", "aliases": [ "CVE-2016-0751" @@ -88,13 +88,41 @@ "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0751" }, { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-ffpv-c4hm-3x6v" + "type": "WEB", + "url": "https://github.com/rails/rails/commit/127967b735813cd4f263df7a50426d74e7e9cc17" + }, + { + "type": "WEB", + "url": "https://github.com/rails/rails/commit/221937c8ba1d291430ceddebbd4bdef7d3cb47d6" + }, + { + "type": "WEB", + "url": "https://github.com/rails/rails/commit/37047b779a177b911c7161052cfc34a30e1db0af" + }, + { + "type": "PACKAGE", + "url": "https://github.com/rails/rails" + }, + { + "type": "WEB", + "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-0751.yml" + }, + { + "type": "WEB", + "url": "https://groups.google.com/forum/#!topic/rubyonrails-security/9oLY_FCzvoc" }, { "type": "WEB", "url": "https://groups.google.com/forum/message/raw?msg=ruby-security-ann/9oLY_FCzvoc/5CDXbvpYEgAJ" }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20160128201702/http://www.securitytracker.com/id/1034816" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20200227181647/http://www.securityfocus.com/bid/81800" + }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html" @@ -126,14 +154,6 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2016/01/25/9" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/81800" - }, - { - "type": "WEB", - "url": "http://www.securitytracker.com/id/1034816" } ], "database_specific": { diff --git a/advisories/unreviewed/2022/05/GHSA-6h8x-73fx-q2h9/GHSA-6h8x-73fx-q2h9.json b/advisories/github-reviewed/2022/05/GHSA-6h8x-73fx-q2h9/GHSA-6h8x-73fx-q2h9.json similarity index 64% rename from advisories/unreviewed/2022/05/GHSA-6h8x-73fx-q2h9/GHSA-6h8x-73fx-q2h9.json rename to advisories/github-reviewed/2022/05/GHSA-6h8x-73fx-q2h9/GHSA-6h8x-73fx-q2h9.json index 7b6e36cfa50..707756c80c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h8x-73fx-q2h9/GHSA-6h8x-73fx-q2h9.json +++ b/advisories/github-reviewed/2022/05/GHSA-6h8x-73fx-q2h9/GHSA-6h8x-73fx-q2h9.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-6h8x-73fx-q2h9", - "modified": "2022-05-17T02:57:32Z", + "modified": "2023-07-31T21:08:39Z", "published": "2022-05-17T02:57:32Z", "aliases": [ "CVE-2016-4043" ], + "summary": "Chameleon in Plone allows Authentication Bypass", "details": "Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "plone" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "5.0rc1" + }, + { + "last_affected": "5.1a1" + } + ] + } + ] + } ], "references": [ { @@ -35,8 +54,8 @@ ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2023-07-31T21:08:39Z", "nvd_published_at": "2017-02-24T20:59:00Z" } } \ No newline at end of file