From 6bfb8134f52cf3e08cf56e56b552c1b2d565928a Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 19 Jul 2023 19:24:31 +0000
Subject: [PATCH] Publish Advisories

GHSA-mppv-79ch-vw6q
GHSA-mpv3-g8m3-3fjc
GHSA-7m5c-fgwf-mwph
GHSA-m5q5-8mfw-p2hr
GHSA-vjh7-5r6x-xh6g
GHSA-wjw2-4j7j-6gc3
---
 .../2023/06/GHSA-mppv-79ch-vw6q/GHSA-mppv-79ch-vw6q.json   | 4 ++++
 .../2023/06/GHSA-mpv3-g8m3-3fjc/GHSA-mpv3-g8m3-3fjc.json   | 4 ++++
 .../2023/07/GHSA-7m5c-fgwf-mwph/GHSA-7m5c-fgwf-mwph.json   | 3 ++-
 .../2023/07/GHSA-m5q5-8mfw-p2hr/GHSA-m5q5-8mfw-p2hr.json   | 7 ++++++-
 .../2023/07/GHSA-vjh7-5r6x-xh6g/GHSA-vjh7-5r6x-xh6g.json   | 5 +++++
 .../2023/07/GHSA-wjw2-4j7j-6gc3/GHSA-wjw2-4j7j-6gc3.json   | 4 ++++
 6 files changed, 25 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2023/06/GHSA-mppv-79ch-vw6q/GHSA-mppv-79ch-vw6q.json b/advisories/github-reviewed/2023/06/GHSA-mppv-79ch-vw6q/GHSA-mppv-79ch-vw6q.json
index b339162a50f..0ea6902fb9b 100644
--- a/advisories/github-reviewed/2023/06/GHSA-mppv-79ch-vw6q/GHSA-mppv-79ch-vw6q.json
+++ b/advisories/github-reviewed/2023/06/GHSA-mppv-79ch-vw6q/GHSA-mppv-79ch-vw6q.json
@@ -125,6 +125,10 @@
       "type": "WEB",
       "url": "https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz"
     },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20230714-0003/"
+    },
     {
       "type": "WEB",
       "url": "https://tomcat.apache.org/security-10.html"
diff --git a/advisories/github-reviewed/2023/06/GHSA-mpv3-g8m3-3fjc/GHSA-mpv3-g8m3-3fjc.json b/advisories/github-reviewed/2023/06/GHSA-mpv3-g8m3-3fjc/GHSA-mpv3-g8m3-3fjc.json
index e45100f7b3d..0d95ad98fb3 100644
--- a/advisories/github-reviewed/2023/06/GHSA-mpv3-g8m3-3fjc/GHSA-mpv3-g8m3-3fjc.json
+++ b/advisories/github-reviewed/2023/06/GHSA-mpv3-g8m3-3fjc/GHSA-mpv3-g8m3-3fjc.json
@@ -112,6 +112,10 @@
     {
       "type": "WEB",
       "url": "https://grafana.com/security/security-advisories/cve-2023-3128/"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20230714-0004/"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2023/07/GHSA-7m5c-fgwf-mwph/GHSA-7m5c-fgwf-mwph.json b/advisories/github-reviewed/2023/07/GHSA-7m5c-fgwf-mwph/GHSA-7m5c-fgwf-mwph.json
index 520b3e6207f..417d1c3651a 100644
--- a/advisories/github-reviewed/2023/07/GHSA-7m5c-fgwf-mwph/GHSA-7m5c-fgwf-mwph.json
+++ b/advisories/github-reviewed/2023/07/GHSA-7m5c-fgwf-mwph/GHSA-7m5c-fgwf-mwph.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7m5c-fgwf-mwph",
-  "modified": "2023-07-17T14:10:24Z",
+  "modified": "2023-07-19T19:23:53Z",
   "published": "2023-07-17T12:30:32Z",
   "aliases": [
     "CVE-2023-34036"
@@ -89,6 +89,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-116",
       "CWE-644"
     ],
     "severity": "MODERATE",
diff --git a/advisories/github-reviewed/2023/07/GHSA-m5q5-8mfw-p2hr/GHSA-m5q5-8mfw-p2hr.json b/advisories/github-reviewed/2023/07/GHSA-m5q5-8mfw-p2hr/GHSA-m5q5-8mfw-p2hr.json
index bcc852ac8da..df3ddbf49b4 100644
--- a/advisories/github-reviewed/2023/07/GHSA-m5q5-8mfw-p2hr/GHSA-m5q5-8mfw-p2hr.json
+++ b/advisories/github-reviewed/2023/07/GHSA-m5q5-8mfw-p2hr/GHSA-m5q5-8mfw-p2hr.json
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/IceWhaleTech/CasaOS/security/advisories/GHSA-m5q5-8mfw-p2hr"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37266"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/IceWhaleTech/CasaOS/commit/705bf1facbffd2ca40b159b0303132b6fdf657ad"
@@ -51,7 +55,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-1391"
+      "CWE-1391",
+      "CWE-287"
     ],
     "severity": "CRITICAL",
     "github_reviewed": true,
diff --git a/advisories/github-reviewed/2023/07/GHSA-vjh7-5r6x-xh6g/GHSA-vjh7-5r6x-xh6g.json b/advisories/github-reviewed/2023/07/GHSA-vjh7-5r6x-xh6g/GHSA-vjh7-5r6x-xh6g.json
index 10ef024045a..8a5accc59e5 100644
--- a/advisories/github-reviewed/2023/07/GHSA-vjh7-5r6x-xh6g/GHSA-vjh7-5r6x-xh6g.json
+++ b/advisories/github-reviewed/2023/07/GHSA-vjh7-5r6x-xh6g/GHSA-vjh7-5r6x-xh6g.json
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/IceWhaleTech/CasaOS-Gateway/security/advisories/GHSA-vjh7-5r6x-xh6g"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37265"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/IceWhaleTech/CasaOS-Gateway/commit/391dd7f0f239020c46bf057cfa25f82031fc15f7"
@@ -51,6 +55,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-306",
       "CWE-348"
     ],
     "severity": "CRITICAL",
diff --git a/advisories/github-reviewed/2023/07/GHSA-wjw2-4j7j-6gc3/GHSA-wjw2-4j7j-6gc3.json b/advisories/github-reviewed/2023/07/GHSA-wjw2-4j7j-6gc3/GHSA-wjw2-4j7j-6gc3.json
index 12ca82379b4..505106de8e5 100644
--- a/advisories/github-reviewed/2023/07/GHSA-wjw2-4j7j-6gc3/GHSA-wjw2-4j7j-6gc3.json
+++ b/advisories/github-reviewed/2023/07/GHSA-wjw2-4j7j-6gc3/GHSA-wjw2-4j7j-6gc3.json
@@ -59,6 +59,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/wintercms/winter/releases/tag/v1.2.3"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/173520/WinterCMS-1.2.2-Cross-Site-Scripting.html"
     }
   ],
   "database_specific": {