diff --git a/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json b/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json index 41deb9b982e..7d6dfdc9efb 100644 --- a/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json +++ b/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-qcx4-gfh8-w5p5", - "modified": "2025-04-04T19:54:14Z", + "modified": "2025-04-04T20:28:34Z", "published": "2022-05-24T16:46:16Z", "aliases": [ "CVE-2019-12277" ], "summary": "Blogifier does not properly restrict APIs", - "details": "Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for `..` in a pathname.", + "details": "Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for `..` in a pathname.\n\nThe issue is patched in the `2.4` branch, but `2.5.5` is the lowest available patched version on https://www.nuget.org/packages/Blogifier.Core.", "severity": [ { "type": "CVSS_V3", @@ -28,11 +28,14 @@ "introduced": "0" }, { - "fixed": "2.4" + "fixed": "2.5.5" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "< 2.4" + } } ], "references": [