From 73af3ba8d5922ae7758d2fd5bf79041383f9479e Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 15 Nov 2023 17:55:13 +0000
Subject: [PATCH] Publish GHSA-p62q-5483-h57v

---
 .../GHSA-p62q-5483-h57v.json                  | 31 ++++++++++++++++---
 1 file changed, 27 insertions(+), 4 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2023/11/GHSA-p62q-5483-h57v/GHSA-p62q-5483-h57v.json (59%)

diff --git a/advisories/unreviewed/2023/11/GHSA-p62q-5483-h57v/GHSA-p62q-5483-h57v.json b/advisories/github-reviewed/2023/11/GHSA-p62q-5483-h57v/GHSA-p62q-5483-h57v.json
similarity index 59%
rename from advisories/unreviewed/2023/11/GHSA-p62q-5483-h57v/GHSA-p62q-5483-h57v.json
rename to advisories/github-reviewed/2023/11/GHSA-p62q-5483-h57v/GHSA-p62q-5483-h57v.json
index 06f9abc73f5..e3f62721d91 100644
--- a/advisories/unreviewed/2023/11/GHSA-p62q-5483-h57v/GHSA-p62q-5483-h57v.json
+++ b/advisories/github-reviewed/2023/11/GHSA-p62q-5483-h57v/GHSA-p62q-5483-h57v.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p62q-5483-h57v",
-  "modified": "2023-11-15T15:30:21Z",
+  "modified": "2023-11-15T17:54:00Z",
   "published": "2023-11-15T15:30:21Z",
   "aliases": [
     "CVE-2023-5720"
   ],
+  "summary": "Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain",
   "details": "A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "io.quarkus:quarkus-project"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "3.0.0.CR1"
+            },
+            {
+              "last_affected": "3.5.1"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -28,6 +47,10 @@
     {
       "type": "WEB",
       "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2245700"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/quarkusio/quarkus"
     }
   ],
   "database_specific": {
@@ -35,8 +58,8 @@
       "CWE-526"
     ],
     "severity": "HIGH",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-11-15T17:54:00Z",
     "nvd_published_at": "2023-11-15T14:15:07Z"
   }
 }
\ No newline at end of file