From 9e7f66c44f5d4cd970c084885ce8f41ee7c848e4 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 16 Oct 2024 17:04:24 +0000 Subject: [PATCH] Publish Advisories GHSA-vh7m-p724-62c2 GHSA-xwmv-cx7p-fqfc --- .../2020/07/GHSA-vh7m-p724-62c2/GHSA-vh7m-p724-62c2.json | 8 ++++++-- .../2024/02/GHSA-xwmv-cx7p-fqfc/GHSA-xwmv-cx7p-fqfc.json | 9 ++++++--- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/advisories/github-reviewed/2020/07/GHSA-vh7m-p724-62c2/GHSA-vh7m-p724-62c2.json b/advisories/github-reviewed/2020/07/GHSA-vh7m-p724-62c2/GHSA-vh7m-p724-62c2.json index 8ba06f570f3..32e00ada785 100644 --- a/advisories/github-reviewed/2020/07/GHSA-vh7m-p724-62c2/GHSA-vh7m-p724-62c2.json +++ b/advisories/github-reviewed/2020/07/GHSA-vh7m-p724-62c2/GHSA-vh7m-p724-62c2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vh7m-p724-62c2", - "modified": "2021-09-23T17:39:58Z", + "modified": "2024-10-16T17:02:45Z", "published": "2020-07-29T20:40:35Z", "aliases": [ "CVE-2020-13822" @@ -57,6 +57,10 @@ "type": "PACKAGE", "url": "https://github.com/indutny/elliptic" }, + { + "type": "WEB", + "url": "https://medium.com/%40herman_10687/malleability-attack-why-it-matters-7b5f59fb99a4" + }, { "type": "WEB", "url": "https://medium.com/@herman_10687/malleability-attack-why-it-matters-7b5f59fb99a4" @@ -77,6 +81,6 @@ "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-07-29T20:39:31Z", - "nvd_published_at": null + "nvd_published_at": "2020-06-04T15:15:13Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2024/02/GHSA-xwmv-cx7p-fqfc/GHSA-xwmv-cx7p-fqfc.json b/advisories/github-reviewed/2024/02/GHSA-xwmv-cx7p-fqfc/GHSA-xwmv-cx7p-fqfc.json index ff5dd627336..7758fa1e3e2 100644 --- a/advisories/github-reviewed/2024/02/GHSA-xwmv-cx7p-fqfc/GHSA-xwmv-cx7p-fqfc.json +++ b/advisories/github-reviewed/2024/02/GHSA-xwmv-cx7p-fqfc/GHSA-xwmv-cx7p-fqfc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xwmv-cx7p-fqfc", - "modified": "2024-02-13T17:42:03Z", + "modified": "2024-10-16T17:03:49Z", "published": "2024-02-13T00:30:27Z", "aliases": [ "CVE-2023-52430" @@ -9,7 +9,10 @@ "summary": "caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting", "details": "The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XSS payload and begins with either a /admin or /settings/mfa/delete/ substring.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ { @@ -52,7 +55,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": true,