Publish GHSA-7mgx-gvjw-m3w3

advisories/github-reviewed/2024/01/GHSA-7mgx-gvjw-m3w3/GHSA-7mgx-gvjw-m3w3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7mgx-gvjw-m3w3",
-  "modified": "2024-01-30T18:43:26Z",
+  "modified": "2024-01-31T12:37:36Z",
   "published": "2024-01-30T03:30:30Z",
   "aliases": [
     "CVE-2023-51982"
@@ -9,7 +9,10 @@
   "summary": "CrateDB authentication bypass vulnerability",
   "details": "CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a specific value and accessing the Admin UI directly using the default user identity.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
     {
@@ -127,7 +130,7 @@
     "cwe_ids": [
 
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-01-30T18:43:26Z",
     "nvd_published_at": "2024-01-30T01:15:59Z"