diff --git a/advisories/github-reviewed/2023/06/GHSA-cgmm-c2m9-ff7r/GHSA-cgmm-c2m9-ff7r.json b/advisories/github-reviewed/2023/06/GHSA-cgmm-c2m9-ff7r/GHSA-cgmm-c2m9-ff7r.json index 35cc1336e30..520f6ed38dc 100644 --- a/advisories/github-reviewed/2023/06/GHSA-cgmm-c2m9-ff7r/GHSA-cgmm-c2m9-ff7r.json +++ b/advisories/github-reviewed/2023/06/GHSA-cgmm-c2m9-ff7r/GHSA-cgmm-c2m9-ff7r.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-cgmm-c2m9-ff7r", - "modified": "2023-06-29T15:02:49Z", + "modified": "2023-07-05T17:16:48Z", "published": "2023-06-26T21:30:59Z", "aliases": [ "CVE-2021-31635" @@ -9,7 +9,10 @@ "summary": "jFinal Server-Side Template Injection vulnerability", "details": "Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -50,7 +53,7 @@ "cwe_ids": [ ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-06-29T15:02:49Z", "nvd_published_at": null diff --git a/advisories/github-reviewed/2023/06/GHSA-pm73-x2h5-cmj3/GHSA-pm73-x2h5-cmj3.json b/advisories/github-reviewed/2023/06/GHSA-pm73-x2h5-cmj3/GHSA-pm73-x2h5-cmj3.json index 46697bec3fe..f5736fa8c00 100644 --- a/advisories/github-reviewed/2023/06/GHSA-pm73-x2h5-cmj3/GHSA-pm73-x2h5-cmj3.json +++ b/advisories/github-reviewed/2023/06/GHSA-pm73-x2h5-cmj3/GHSA-pm73-x2h5-cmj3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pm73-x2h5-cmj3", - "modified": "2023-06-23T21:44:46Z", + "modified": "2023-07-05T17:16:47Z", "published": "2023-06-23T09:30:17Z", "aliases": [ "CVE-2023-31469" @@ -9,7 +9,10 @@ "summary": "Apache StreamPipes Improper Privilege Management vulnerability", "details": "A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid login credentials to elevate privileges beyond the initially assigned roles.\nThe issue is resolved by upgrading to StreamPipes 0.92.0.\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -50,7 +53,7 @@ "cwe_ids": [ "CWE-269" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-06-23T21:44:46Z", "nvd_published_at": null diff --git a/advisories/github-reviewed/2023/06/GHSA-x49m-3cw7-gq5q/GHSA-x49m-3cw7-gq5q.json b/advisories/github-reviewed/2023/06/GHSA-x49m-3cw7-gq5q/GHSA-x49m-3cw7-gq5q.json index ca23f120835..b29bc3c7963 100644 --- a/advisories/github-reviewed/2023/06/GHSA-x49m-3cw7-gq5q/GHSA-x49m-3cw7-gq5q.json +++ b/advisories/github-reviewed/2023/06/GHSA-x49m-3cw7-gq5q/GHSA-x49m-3cw7-gq5q.json @@ -55,6 +55,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1284", "CWE-77" ], "severity": "HIGH",