Publish Advisories

GHSA-g4xm-5mqm-8m32
GHSA-jqr2-7f24-xrgc
GHSA-v9w3-34xq-hrjg

advisories/github-reviewed/2023/12/GHSA-g4xm-5mqm-8m32/GHSA-g4xm-5mqm-8m32.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g4xm-5mqm-8m32",
-  "modified": "2023-12-13T19:44:46Z",
+  "modified": "2023-12-18T21:44:04Z",
   "published": "2023-12-13T18:31:04Z",
   "aliases": [
     "CVE-2023-50778"
@@ -9,7 +9,10 @@
   "summary": "Cross-Site Request Forgery in Jenkins PaaSLane Estimate Plugin",
   "details": "A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified token.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
   ],
   "affected": [
     {

advisories/github-reviewed/2023/12/GHSA-jqr2-7f24-xrgc/GHSA-jqr2-7f24-xrgc.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jqr2-7f24-xrgc",
-  "modified": "2023-12-13T19:45:06Z",
+  "modified": "2023-12-18T21:44:26Z",
   "published": "2023-12-13T18:31:04Z",
   "aliases": [
     "CVE-2023-50779"
@@ -9,7 +9,10 @@
   "summary": "Missing permission check in Jenkins PaaSLane Estimate Plugin",
   "details": "PaaSLane Estimate Plugin 1.0.4 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified token.\n",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
   ],
   "affected": [
     {
@@ -52,7 +55,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-862"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,

advisories/github-reviewed/2023/12/GHSA-v9w3-34xq-hrjg/GHSA-v9w3-34xq-hrjg.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v9w3-34xq-hrjg",
-  "modified": "2023-12-13T23:15:24Z",
+  "modified": "2023-12-18T21:43:29Z",
   "published": "2023-12-13T18:31:04Z",
   "aliases": [
     "CVE-2023-50777"
@@ -9,7 +9,10 @@
   "summary": "Tokens stored in plain text by PaaSLane Estimate Plugin ",
   "details": "Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
   ],
   "affected": [
     {