From 6a2ea8a0ad8cc6e324bb991022e53c52e85949f7 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 29 Jan 2025 16:56:28 +0000
Subject: [PATCH] Publish Advisories

GHSA-29xx-fhff-36m7
GHSA-788m-27g4-cf86
---
 .../2024/02/GHSA-29xx-fhff-36m7/GHSA-29xx-fhff-36m7.json    | 6 +++++-
 .../2025/01/GHSA-788m-27g4-cf86/GHSA-788m-27g4-cf86.json    | 6 +++---
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2024/02/GHSA-29xx-fhff-36m7/GHSA-29xx-fhff-36m7.json b/advisories/github-reviewed/2024/02/GHSA-29xx-fhff-36m7/GHSA-29xx-fhff-36m7.json
index 1c89d5a47b3..67458bf885e 100644
--- a/advisories/github-reviewed/2024/02/GHSA-29xx-fhff-36m7/GHSA-29xx-fhff-36m7.json
+++ b/advisories/github-reviewed/2024/02/GHSA-29xx-fhff-36m7/GHSA-29xx-fhff-36m7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-29xx-fhff-36m7",
-  "modified": "2024-10-02T21:50:20Z",
+  "modified": "2025-01-29T16:54:55Z",
   "published": "2024-02-20T15:31:03Z",
   "aliases": [
     "CVE-2024-26265"
@@ -44,6 +44,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26265"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/liferay/liferay-portal"
+    },
     {
       "type": "WEB",
       "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26265"
diff --git a/advisories/github-reviewed/2025/01/GHSA-788m-27g4-cf86/GHSA-788m-27g4-cf86.json b/advisories/github-reviewed/2025/01/GHSA-788m-27g4-cf86/GHSA-788m-27g4-cf86.json
index e1c75080308..63abc403ac5 100644
--- a/advisories/github-reviewed/2025/01/GHSA-788m-27g4-cf86/GHSA-788m-27g4-cf86.json
+++ b/advisories/github-reviewed/2025/01/GHSA-788m-27g4-cf86/GHSA-788m-27g4-cf86.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-788m-27g4-cf86",
-  "modified": "2025-01-23T23:14:15Z",
+  "modified": "2025-01-29T16:55:54Z",
   "published": "2025-01-22T21:30:57Z",
   "aliases": [
     "CVE-2024-56923"
   ],
   "summary": "Cross site scripting in Silverpeas Core",
-  "details": "Stored Cross-Site Scripting (XSS) in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.",
+  "details": "Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The attack can lead to session hijacking, data theft, or unauthorized actions when an admin user views the affected subscription.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -29,7 +29,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "6.3.1"
             },
             {
               "fixed": "6.4.2"