diff --git a/advisories/github-reviewed/2022/05/GHSA-xjrf-8x4f-43h4/GHSA-xjrf-8x4f-43h4.json b/advisories/github-reviewed/2022/05/GHSA-xjrf-8x4f-43h4/GHSA-xjrf-8x4f-43h4.json index dc025edf07d..c51276e1768 100644 --- a/advisories/github-reviewed/2022/05/GHSA-xjrf-8x4f-43h4/GHSA-xjrf-8x4f-43h4.json +++ b/advisories/github-reviewed/2022/05/GHSA-xjrf-8x4f-43h4/GHSA-xjrf-8x4f-43h4.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xjrf-8x4f-43h4", - "modified": "2024-02-27T23:13:12Z", + "modified": "2024-06-05T17:06:44Z", "published": "2022-05-05T00:29:18Z", "aliases": [ "CVE-2013-6430" @@ -25,7 +25,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "3.0.0.RELEASE" }, { "fixed": "3.2.2.RELEASE" @@ -66,6 +66,10 @@ { "type": "WEB", "url": "https://jira.spring.io/browse/SPR-9983?redirect=false" + }, + { + "type": "WEB", + "url": "https://spring.io/security/cve-2013-6430" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/06/GHSA-q5mg-pc7r-r8cr/GHSA-q5mg-pc7r-r8cr.json b/advisories/github-reviewed/2024/06/GHSA-q5mg-pc7r-r8cr/GHSA-q5mg-pc7r-r8cr.json similarity index 51% rename from advisories/unreviewed/2024/06/GHSA-q5mg-pc7r-r8cr/GHSA-q5mg-pc7r-r8cr.json rename to advisories/github-reviewed/2024/06/GHSA-q5mg-pc7r-r8cr/GHSA-q5mg-pc7r-r8cr.json index ecb2b677dec..482a4aabde3 100644 --- a/advisories/unreviewed/2024/06/GHSA-q5mg-pc7r-r8cr/GHSA-q5mg-pc7r-r8cr.json +++ b/advisories/github-reviewed/2024/06/GHSA-q5mg-pc7r-r8cr/GHSA-q5mg-pc7r-r8cr.json @@ -1,17 +1,36 @@ { "schema_version": "1.4.0", "id": "GHSA-q5mg-pc7r-r8cr", - "modified": "2024-06-05T06:30:39Z", + "modified": "2024-06-05T17:06:29Z", "published": "2024-06-05T06:30:39Z", "aliases": [ "CVE-2024-5262" ], + "summary": "Files or Directories Accessible to External Parties in ProjectDiscovery", "details": "Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.", "severity": [ ], "affected": [ - + { + "package": { + "ecosystem": "Go", + "name": "github.com/projectdiscovery/interactsh" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.2.0" + } + ] + } + ] + } ], "references": [ { @@ -22,6 +41,14 @@ "type": "WEB", "url": "https://github.com/projectdiscovery/interactsh/pull/874" }, + { + "type": "WEB", + "url": "https://github.com/projectdiscovery/interactsh/commit/6a0cb98b16636a98712729f3d23e34d8bf7260e7" + }, + { + "type": "PACKAGE", + "url": "https://github.com/projectdiscovery/interactsh" + }, { "type": "WEB", "url": "https://zuso.ai/advisory/za-2024-01" @@ -31,9 +58,9 @@ "cwe_ids": [ "CWE-552" ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-06-05T17:06:29Z", "nvd_published_at": "2024-06-05T04:15:11Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2024/06/GHSA-v4qr-8h2v-qpjx/GHSA-v4qr-8h2v-qpjx.json b/advisories/github-reviewed/2024/06/GHSA-v4qr-8h2v-qpjx/GHSA-v4qr-8h2v-qpjx.json new file mode 100644 index 00000000000..3f32ce7094a --- /dev/null +++ b/advisories/github-reviewed/2024/06/GHSA-v4qr-8h2v-qpjx/GHSA-v4qr-8h2v-qpjx.json @@ -0,0 +1,65 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v4qr-8h2v-qpjx", + "modified": "2024-06-05T17:07:16Z", + "published": "2024-06-05T17:07:15Z", + "aliases": [ + + ], + "summary": "Cross-Site Scripting in TYPO3 CMS Backend", + "details": "Failing to properly encode user input, backend forms are vulnerable to Cross-Site Scripting. A valid backend user account is needed to exploit this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "typo3/cms" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.7.5" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-09-05-1.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/TYPO3/typo3" + }, + { + "type": "WEB", + "url": "https://typo3.org/security/advisory/typo3-core-sa-2017-004" + }, + { + "type": "WEB", + "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-004" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-06-05T17:07:15Z", + "nvd_published_at": null + } +} \ No newline at end of file