diff --git a/advisories/unreviewed/2023/12/GHSA-p2vx-qj66-88q3/GHSA-p2vx-qj66-88q3.json b/advisories/github-reviewed/2023/12/GHSA-p2vx-qj66-88q3/GHSA-p2vx-qj66-88q3.json similarity index 72% rename from advisories/unreviewed/2023/12/GHSA-p2vx-qj66-88q3/GHSA-p2vx-qj66-88q3.json rename to advisories/github-reviewed/2023/12/GHSA-p2vx-qj66-88q3/GHSA-p2vx-qj66-88q3.json index 16d592b18b2..466192544fc 100644 --- a/advisories/unreviewed/2023/12/GHSA-p2vx-qj66-88q3/GHSA-p2vx-qj66-88q3.json +++ b/advisories/github-reviewed/2023/12/GHSA-p2vx-qj66-88q3/GHSA-p2vx-qj66-88q3.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-p2vx-qj66-88q3", - "modified": "2023-12-12T09:30:31Z", + "modified": "2023-12-20T17:57:49Z", "published": "2023-12-12T03:31:45Z", "aliases": [ "CVE-2023-49583" ], + "summary": "Escalation of privileges in @sap/xssec", "details": "SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "npm", + "name": "@sap/xssec" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.6.0" + } + ] + } + ] + } ], "references": [ { @@ -44,8 +63,8 @@ "CWE-639" ], "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2023-12-20T17:57:49Z", "nvd_published_at": "2023-12-12T02:15:07Z" } } \ No newline at end of file