diff --git a/advisories/github-reviewed/2021/10/GHSA-cpqf-3c3r-c9g2/GHSA-cpqf-3c3r-c9g2.json b/advisories/github-reviewed/2021/10/GHSA-cpqf-3c3r-c9g2/GHSA-cpqf-3c3r-c9g2.json index f594b3bf42d..9428bf5f825 100644 --- a/advisories/github-reviewed/2021/10/GHSA-cpqf-3c3r-c9g2/GHSA-cpqf-3c3r-c9g2.json +++ b/advisories/github-reviewed/2021/10/GHSA-cpqf-3c3r-c9g2/GHSA-cpqf-3c3r-c9g2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-cpqf-3c3r-c9g2", - "modified": "2021-10-05T15:57:32Z", + "modified": "2024-09-13T15:11:50Z", "published": "2021-10-05T17:53:20Z", "aliases": [ "CVE-2021-40323" @@ -9,7 +9,14 @@ "summary": "Cobbler before 3.3.0 allows log poisoning", "details": "Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" + } ], "affected": [ { @@ -41,6 +48,10 @@ "type": "WEB", "url": "https://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-cpqf-3c3r-c9g2" + }, { "type": "PACKAGE", "url": "https://github.com/cobbler/cobbler" @@ -48,6 +59,10 @@ { "type": "WEB", "url": "https://github.com/cobbler/cobbler/releases/tag/v3.3.0" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/cobbler/PYSEC-2021-373.yaml" } ], "database_specific": { diff --git a/advisories/github-reviewed/2022/05/GHSA-2cvf-r9jm-4qm9/GHSA-2cvf-r9jm-4qm9.json b/advisories/github-reviewed/2022/05/GHSA-2cvf-r9jm-4qm9/GHSA-2cvf-r9jm-4qm9.json index 4394dc47938..9d356c5d0ba 100644 --- a/advisories/github-reviewed/2022/05/GHSA-2cvf-r9jm-4qm9/GHSA-2cvf-r9jm-4qm9.json +++ b/advisories/github-reviewed/2022/05/GHSA-2cvf-r9jm-4qm9/GHSA-2cvf-r9jm-4qm9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2cvf-r9jm-4qm9", - "modified": "2023-07-19T20:01:06Z", + "modified": "2024-09-13T15:13:16Z", "published": "2022-05-13T01:14:22Z", "aliases": [ "CVE-2019-3830" @@ -11,7 +11,11 @@ "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -59,13 +63,17 @@ { "type": "PACKAGE", "url": "https://github.com/openstack/ceilometer" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/ceilometer/PYSEC-2019-78.yaml" } ], "database_specific": { "cwe_ids": [ "CWE-532" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-07-19T20:01:06Z", "nvd_published_at": "2019-03-26T18:29:00Z"