From 7adb9aaa41ebd75ad57cdeac544faa8e7255c710 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 1 Mar 2024 21:46:11 +0000
Subject: [PATCH] Publish GHSA-9q6v-rxmw-g3gh

---
 .../GHSA-9q6v-rxmw-g3gh.json                  | 36 +++++++++++++++----
 1 file changed, 30 insertions(+), 6 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2024/03/GHSA-9q6v-rxmw-g3gh/GHSA-9q6v-rxmw-g3gh.json (56%)

diff --git a/advisories/unreviewed/2024/03/GHSA-9q6v-rxmw-g3gh/GHSA-9q6v-rxmw-g3gh.json b/advisories/github-reviewed/2024/03/GHSA-9q6v-rxmw-g3gh/GHSA-9q6v-rxmw-g3gh.json
similarity index 56%
rename from advisories/unreviewed/2024/03/GHSA-9q6v-rxmw-g3gh/GHSA-9q6v-rxmw-g3gh.json
rename to advisories/github-reviewed/2024/03/GHSA-9q6v-rxmw-g3gh/GHSA-9q6v-rxmw-g3gh.json
index be18486b2b9..c683cad338f 100644
--- a/advisories/unreviewed/2024/03/GHSA-9q6v-rxmw-g3gh/GHSA-9q6v-rxmw-g3gh.json
+++ b/advisories/github-reviewed/2024/03/GHSA-9q6v-rxmw-g3gh/GHSA-9q6v-rxmw-g3gh.json
@@ -1,23 +1,46 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9q6v-rxmw-g3gh",
-  "modified": "2024-03-01T15:31:38Z",
+  "modified": "2024-03-01T21:44:45Z",
   "published": "2024-03-01T15:31:38Z",
   "aliases": [
     "CVE-2023-50378"
   ],
+  "summary": "Apache Ambari: Various Cross site scripting problems",
   "details": "Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8  \n\n Impact : As it will be stored XSS, Could be exploited to perform unauthorized actions, varying from data access to session hijacking and delivering malicious payloads. \n\nUsers are recommended to upgrade to version  2.7.8 which fixes this issue.\n\n",
   "severity": [
 
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.ambari:ambari"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.7.8"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50378"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/apache/ambari"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread/6hn0thq743vz9gh283s2d87wz8tqh37c"
@@ -25,11 +48,12 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-79"
     ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-03-01T21:44:45Z",
     "nvd_published_at": "2024-03-01T15:15:08Z"
   }
 }
\ No newline at end of file