diff --git a/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json b/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json index f7f51654a97..2e3ae07524f 100644 --- a/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json +++ b/advisories/github-reviewed/2024/01/GHSA-6f9g-cxwr-q5jr/GHSA-6f9g-cxwr-q5jr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6f9g-cxwr-q5jr", - "modified": "2024-01-26T01:56:43Z", + "modified": "2024-01-29T18:56:23Z", "published": "2024-01-24T18:31:02Z", "aliases": [ "CVE-2024-23897" @@ -22,14 +22,42 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "2.222.1" + "introduced": "1.606" }, { - "fixed": "2.427" + "last_affected": "2.426.2" } ] } ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.main:jenkins-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.427" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "< 2.440" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.main:jenkins-core" + }, + "versions": [ + "2.441" + ] } ], "references": [ @@ -41,6 +69,14 @@ "type": "WEB", "url": "https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314" }, + { + "type": "WEB", + "url": "http://packetstormsecurity.com/files/176839/Jenkins-2.441-LTS-2.426.3-CVE-2024-23897-Scanner.html" + }, + { + "type": "WEB", + "url": "http://packetstormsecurity.com/files/176840/Jenkins-2.441-LTS-2.426.3-Arbitrary-File-Read.html" + }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2024/01/24/6"