diff --git a/advisories/github-reviewed/2023/09/GHSA-86c6-3g63-5w64/GHSA-86c6-3g63-5w64.json b/advisories/github-reviewed/2023/09/GHSA-86c6-3g63-5w64/GHSA-86c6-3g63-5w64.json index 1a7fa9ad191..3804c1e01b4 100644 --- a/advisories/github-reviewed/2023/09/GHSA-86c6-3g63-5w64/GHSA-86c6-3g63-5w64.json +++ b/advisories/github-reviewed/2023/09/GHSA-86c6-3g63-5w64/GHSA-86c6-3g63-5w64.json @@ -51,6 +51,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-266", "CWE-732" ], "severity": "HIGH", diff --git a/advisories/github-reviewed/2024/09/GHSA-73gr-32wg-qhh7/GHSA-73gr-32wg-qhh7.json b/advisories/github-reviewed/2024/09/GHSA-73gr-32wg-qhh7/GHSA-73gr-32wg-qhh7.json index d45616042d7..95233041113 100644 --- a/advisories/github-reviewed/2024/09/GHSA-73gr-32wg-qhh7/GHSA-73gr-32wg-qhh7.json +++ b/advisories/github-reviewed/2024/09/GHSA-73gr-32wg-qhh7/GHSA-73gr-32wg-qhh7.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-73gr-32wg-qhh7", - "modified": "2024-09-18T22:05:30Z", + "modified": "2024-09-27T17:03:17Z", "published": "2024-09-18T22:05:30Z", "aliases": [ "CVE-2024-47050" ], "summary": "Mautic vulnerable to XSS in contact/company tracking (no authentication)", - "details": "## Summary\nPrior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.\n \n## Patches\nPlease update to 4.4.13 or 5.1.1 or later.\n\n## Workarounds\nNone\n\n## References\nhttps://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\nhttps://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)", + "details": "## Summary\nPrior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.\n \n## Patches\nPlease update to 4.4.13 or 5.1.1 or later.\n\n## Workarounds\nNone\n\n## References\nhttps://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\nhttps://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting\n\nIf you have any questions or comments about this advisory:\nEmail us at [security@mautic.org](mailto:security@mautic.org)", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/github-reviewed/2024/09/GHSA-xpc5-rr39-v8v2/GHSA-xpc5-rr39-v8v2.json b/advisories/github-reviewed/2024/09/GHSA-xpc5-rr39-v8v2/GHSA-xpc5-rr39-v8v2.json index 5e8f057b177..2c27e20e22d 100644 --- a/advisories/github-reviewed/2024/09/GHSA-xpc5-rr39-v8v2/GHSA-xpc5-rr39-v8v2.json +++ b/advisories/github-reviewed/2024/09/GHSA-xpc5-rr39-v8v2/GHSA-xpc5-rr39-v8v2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xpc5-rr39-v8v2", - "modified": "2024-09-19T15:26:32Z", + "modified": "2024-09-27T17:03:14Z", "published": "2024-09-18T22:05:59Z", "aliases": [ "CVE-2021-27917" @@ -122,7 +122,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-09-18T22:05:59Z", "nvd_published_at": "2024-09-18T22:15:03Z"