diff --git a/advisories/github-reviewed/2022/10/GHSA-4g29-r7vj-2rpv/GHSA-4g29-r7vj-2rpv.json b/advisories/github-reviewed/2022/10/GHSA-4g29-r7vj-2rpv/GHSA-4g29-r7vj-2rpv.json index 53dcef640d8..b5707c6510e 100644 --- a/advisories/github-reviewed/2022/10/GHSA-4g29-r7vj-2rpv/GHSA-4g29-r7vj-2rpv.json +++ b/advisories/github-reviewed/2022/10/GHSA-4g29-r7vj-2rpv/GHSA-4g29-r7vj-2rpv.json @@ -43,6 +43,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43413" }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/job-import-plugin/commit/1b4119849571d4879977c529f9972d271ad6a630" + }, { "type": "WEB", "url": "https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2791" diff --git a/advisories/github-reviewed/2023/01/GHSA-3ppr-72x5-x67q/GHSA-3ppr-72x5-x67q.json b/advisories/github-reviewed/2023/01/GHSA-3ppr-72x5-x67q/GHSA-3ppr-72x5-x67q.json index 0bab74360cd..b50b345e5c6 100644 --- a/advisories/github-reviewed/2023/01/GHSA-3ppr-72x5-x67q/GHSA-3ppr-72x5-x67q.json +++ b/advisories/github-reviewed/2023/01/GHSA-3ppr-72x5-x67q/GHSA-3ppr-72x5-x67q.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3ppr-72x5-x67q", - "modified": "2023-01-27T01:03:33Z", + "modified": "2024-01-04T12:11:28Z", "published": "2023-01-26T21:30:18Z", "aliases": [ "CVE-2023-24441" @@ -9,7 +9,10 @@ "summary": "XML external entity vulnerability on agents in Jenkins MSTest Plugin ", "details": "Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -37,6 +40,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24441" }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/mstest-plugin/commit/f9b9b0cbdf7559fdd8fc4004e5a242f5801daa67" + }, { "type": "WEB", "url": "https://github.com/jenkinsci/mstest-plugin/releases/tag/mstest-1.0.1" @@ -50,7 +57,7 @@ "cwe_ids": [ "CWE-776" ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-01-27T01:03:33Z", "nvd_published_at": "2023-01-26T21:18:00Z" diff --git a/advisories/github-reviewed/2023/05/GHSA-46f2-x6h2-x9hx/GHSA-46f2-x6h2-x9hx.json b/advisories/github-reviewed/2023/05/GHSA-46f2-x6h2-x9hx/GHSA-46f2-x6h2-x9hx.json index 18e1de884af..f41eb05ed5a 100644 --- a/advisories/github-reviewed/2023/05/GHSA-46f2-x6h2-x9hx/GHSA-46f2-x6h2-x9hx.json +++ b/advisories/github-reviewed/2023/05/GHSA-46f2-x6h2-x9hx/GHSA-46f2-x6h2-x9hx.json @@ -40,6 +40,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32986" }, + { + "type": "WEB", + "url": "https://github.com/jenkinsci/file-parameters-plugin/commit/4b7b29d3469dc020ec61a387c0c793c1f1ac31dd" + }, { "type": "WEB", "url": "https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3123"