diff --git a/advisories/github-reviewed/2022/02/GHSA-484q-784p-8m5h/GHSA-484q-784p-8m5h.json b/advisories/github-reviewed/2022/02/GHSA-484q-784p-8m5h/GHSA-484q-784p-8m5h.json index 8798730092a..fca23567807 100644 --- a/advisories/github-reviewed/2022/02/GHSA-484q-784p-8m5h/GHSA-484q-784p-8m5h.json +++ b/advisories/github-reviewed/2022/02/GHSA-484q-784p-8m5h/GHSA-484q-784p-8m5h.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-484q-784p-8m5h", - "modified": "2021-04-01T19:41:54Z", + "modified": "2024-04-22T19:48:27Z", "published": "2022-02-09T00:58:15Z", "aliases": [ "CVE-2020-10776" @@ -18,7 +18,26 @@ { "package": { "ecosystem": "Maven", - "name": "org.keycloak:keycloak-parent" + "name": "org.keycloak:keycloak-server-spi-private" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "12.0.0" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.keycloak:keycloak-services" }, "ranges": [ { @@ -40,6 +59,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10776" }, + { + "type": "WEB", + "url": "https://github.com/keycloak/keycloak/commit/01be601dbdd77822827de173e34180d9322db85c" + }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847428" diff --git a/advisories/github-reviewed/2022/02/GHSA-rvfc-g8j5-9ccf/GHSA-rvfc-g8j5-9ccf.json b/advisories/github-reviewed/2022/02/GHSA-rvfc-g8j5-9ccf/GHSA-rvfc-g8j5-9ccf.json index 84bbf033905..94ef10cce1a 100644 --- a/advisories/github-reviewed/2022/02/GHSA-rvfc-g8j5-9ccf/GHSA-rvfc-g8j5-9ccf.json +++ b/advisories/github-reviewed/2022/02/GHSA-rvfc-g8j5-9ccf/GHSA-rvfc-g8j5-9ccf.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-rvfc-g8j5-9ccf", - "modified": "2021-04-01T16:29:50Z", + "modified": "2024-04-22T19:47:34Z", "published": "2022-02-09T00:59:06Z", "aliases": [ "CVE-2020-1717" ], - "summary": "Generation of Error Message Containing Sensitive Information in keybloack", + "summary": "Generation of Error Message Containing Sensitive Information in Keycloak", "details": "A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.", "severity": [ { @@ -53,7 +53,7 @@ "cwe_ids": [ "CWE-209" ], - "severity": "MODERATE", + "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2021-04-01T16:29:50Z", "nvd_published_at": "2021-02-11T18:15:00Z"