From 8d4b6360de8da59a8569937b3bea5cdf42860788 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 27 Jun 2023 20:53:07 +0000
Subject: [PATCH] Publish Advisories

GHSA-rmpj-7c96-mrg8
GHSA-3jp6-q9cg-rvgj
GHSA-fmq9-r4p2-8272
---
 .../2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json   | 6 +++++-
 .../2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json   | 1 +
 .../2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json   | 7 ++++---
 3 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json b/advisories/github-reviewed/2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json
index 08277c493c1..7ae091beb11 100644
--- a/advisories/github-reviewed/2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json
+++ b/advisories/github-reviewed/2022/06/GHSA-rmpj-7c96-mrg8/GHSA-rmpj-7c96-mrg8.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rmpj-7c96-mrg8",
-  "modified": "2022-07-19T19:43:35Z",
+  "modified": "2023-06-27T20:51:43Z",
   "published": "2022-06-14T00:00:37Z",
   "aliases": [
     "CVE-2021-37404"
@@ -78,6 +78,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-37404"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/apache/hadoop"
+    },
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread/2h56ztcj3ojc66qzf1nno88vjw9vd4wo"
diff --git a/advisories/github-reviewed/2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json b/advisories/github-reviewed/2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json
index ffb0a3406bb..0f44cacad85 100644
--- a/advisories/github-reviewed/2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json
+++ b/advisories/github-reviewed/2022/09/GHSA-3jp6-q9cg-rvgj/GHSA-3jp6-q9cg-rvgj.json
@@ -55,6 +55,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-862",
       "CWE-863"
     ],
     "severity": "MODERATE",
diff --git a/advisories/github-reviewed/2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json b/advisories/github-reviewed/2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json
index 5121d0314b3..5448c2e2a1a 100644
--- a/advisories/github-reviewed/2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json
+++ b/advisories/github-reviewed/2022/09/GHSA-fmq9-r4p2-8272/GHSA-fmq9-r4p2-8272.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fmq9-r4p2-8272",
-  "modified": "2022-12-06T00:39:13Z",
+  "modified": "2023-06-27T20:52:17Z",
   "published": "2022-09-22T00:00:26Z",
   "aliases": [
     "CVE-2022-41255"
   ],
   "summary": "API token stored in plain text by Jenkins CONS3RT Plugin",
-  "details": "CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThis API token can be viewed by users with access to the Jenkins controller file system.",
+  "details": "Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThis API token can be viewed by users with access to the Jenkins controller file system.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -55,7 +55,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-256"
+      "CWE-256",
+      "CWE-522"
     ],
     "severity": "LOW",
     "github_reviewed": true,