Publish Advisories

GHSA-xjrf-8x4f-43h4
GHSA-q5mg-pc7r-r8cr
GHSA-v4qr-8h2v-qpjx

advisories/github-reviewed/2022/05/GHSA-xjrf-8x4f-43h4/GHSA-xjrf-8x4f-43h4.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xjrf-8x4f-43h4",
-  "modified": "2024-02-27T23:13:12Z",
+  "modified": "2024-06-05T17:06:44Z",
   "published": "2022-05-05T00:29:18Z",
   "aliases": [
     "CVE-2013-6430"
@@ -25,7 +25,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "3.0.0.RELEASE"
             },
             {
               "fixed": "3.2.2.RELEASE"
@@ -66,6 +66,10 @@
     {
       "type": "WEB",
       "url": "https://jira.spring.io/browse/SPR-9983?redirect=false"
+    },
+    {
+      "type": "WEB",
+      "url": "https://spring.io/security/cve-2013-6430"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2024/06/GHSA-q5mg-pc7r-r8cr/GHSA-q5mg-pc7r-r8cr.json

@@ -1,17 +1,36 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q5mg-pc7r-r8cr",
-  "modified": "2024-06-05T06:30:39Z",
+  "modified": "2024-06-05T17:06:29Z",
   "published": "2024-06-05T06:30:39Z",
   "aliases": [
     "CVE-2024-5262"
   ],
+  "summary": "Files or Directories Accessible to External Parties in ProjectDiscovery",
   "details": "Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.",
   "severity": [
 
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Go",
+        "name": "github.com/projectdiscovery/interactsh"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.2.0"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -22,6 +41,14 @@
       "type": "WEB",
       "url": "https://github.com/projectdiscovery/interactsh/pull/874"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/projectdiscovery/interactsh/commit/6a0cb98b16636a98712729f3d23e34d8bf7260e7"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/projectdiscovery/interactsh"
+    },
     {
       "type": "WEB",
       "url": "https://zuso.ai/advisory/za-2024-01"
@@ -31,9 +58,9 @@
     "cwe_ids": [
       "CWE-552"
     ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-06-05T17:06:29Z",
     "nvd_published_at": "2024-06-05T04:15:11Z"
   }
 }

advisories/github-reviewed/2024/06/GHSA-v4qr-8h2v-qpjx/GHSA-v4qr-8h2v-qpjx.json

@@ -0,0 +1,65 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v4qr-8h2v-qpjx",
+  "modified": "2024-06-05T17:07:16Z",
+  "published": "2024-06-05T17:07:15Z",
+  "aliases": [
+
+  ],
+  "summary": "Cross-Site Scripting in TYPO3 CMS Backend",
+  "details": "Failing to properly encode user input, backend forms are vulnerable to Cross-Site Scripting. A valid backend user account is needed to exploit this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "typo3/cms"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "8.0.0"
+            },
+            {
+              "fixed": "8.7.5"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-09-05-1.yaml"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/TYPO3/typo3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://typo3.org/security/advisory/typo3-core-sa-2017-004"
+    },
+    {
+      "type": "WEB",
+      "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-004"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-06-05T17:07:15Z",
+    "nvd_published_at": null
+  }
+}