From b18f59896bc0d48cde2a76ecd1f241e4a413a821 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 1 Oct 2024 19:28:54 +0000 Subject: [PATCH] Publish Advisories GHSA-22gh-3r9q-xf38 GHSA-jj23-fj2v-m872 GHSA-9wj3-cfq8-wpvj GHSA-pqgm-9g82-wcm7 --- .../GHSA-22gh-3r9q-xf38/GHSA-22gh-3r9q-xf38.json | 12 ++++++++++-- .../GHSA-jj23-fj2v-m872/GHSA-jj23-fj2v-m872.json | 15 +++++++++++++-- .../GHSA-9wj3-cfq8-wpvj/GHSA-9wj3-cfq8-wpvj.json | 6 +++++- .../GHSA-pqgm-9g82-wcm7/GHSA-pqgm-9g82-wcm7.json | 6 +++++- 4 files changed, 33 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2021/09/GHSA-22gh-3r9q-xf38/GHSA-22gh-3r9q-xf38.json b/advisories/github-reviewed/2021/09/GHSA-22gh-3r9q-xf38/GHSA-22gh-3r9q-xf38.json index 42ba60bd04a..b6434f4919e 100644 --- a/advisories/github-reviewed/2021/09/GHSA-22gh-3r9q-xf38/GHSA-22gh-3r9q-xf38.json +++ b/advisories/github-reviewed/2021/09/GHSA-22gh-3r9q-xf38/GHSA-22gh-3r9q-xf38.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-22gh-3r9q-xf38", - "modified": "2024-06-26T15:20:26Z", + "modified": "2024-10-01T19:26:44Z", "published": "2021-09-20T19:53:30Z", "aliases": [ "CVE-2021-39214" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -47,13 +51,17 @@ { "type": "PACKAGE", "url": "https://github.com/mitmproxy/mitmproxy" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/mitmproxy/PYSEC-2021-328.yaml" } ], "database_specific": { "cwe_ids": [ "CWE-444" ], - "severity": "HIGH", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2021-09-17T18:30:53Z", "nvd_published_at": "2021-09-16T15:15:00Z" diff --git a/advisories/github-reviewed/2022/05/GHSA-jj23-fj2v-m872/GHSA-jj23-fj2v-m872.json b/advisories/github-reviewed/2022/05/GHSA-jj23-fj2v-m872/GHSA-jj23-fj2v-m872.json index 3e2098b56a7..966aabf6a90 100644 --- a/advisories/github-reviewed/2022/05/GHSA-jj23-fj2v-m872/GHSA-jj23-fj2v-m872.json +++ b/advisories/github-reviewed/2022/05/GHSA-jj23-fj2v-m872/GHSA-jj23-fj2v-m872.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jj23-fj2v-m872", - "modified": "2024-04-29T14:41:14Z", + "modified": "2024-10-01T19:26:08Z", "published": "2022-05-02T03:57:54Z", "aliases": [ "CVE-2009-4762" @@ -9,7 +9,14 @@ "summary": "MoinMoin Improper Access Control vulnerability", "details": "MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -60,6 +67,10 @@ "type": "PACKAGE", "url": "https://github.com/moinwiki/moin" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2010-13.yaml" + }, { "type": "WEB", "url": "https://web.archive.org/web/20140805132556/http://secunia.com/advisories/39887" diff --git a/advisories/github-reviewed/2023/10/GHSA-9wj3-cfq8-wpvj/GHSA-9wj3-cfq8-wpvj.json b/advisories/github-reviewed/2023/10/GHSA-9wj3-cfq8-wpvj/GHSA-9wj3-cfq8-wpvj.json index fe67e9b8da1..91fd91bb9bb 100644 --- a/advisories/github-reviewed/2023/10/GHSA-9wj3-cfq8-wpvj/GHSA-9wj3-cfq8-wpvj.json +++ b/advisories/github-reviewed/2023/10/GHSA-9wj3-cfq8-wpvj/GHSA-9wj3-cfq8-wpvj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9wj3-cfq8-wpvj", - "modified": "2023-10-20T23:02:47Z", + "modified": "2024-10-01T19:27:15Z", "published": "2023-10-20T18:30:57Z", "aliases": [ "CVE-2023-5689" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ diff --git a/advisories/github-reviewed/2023/10/GHSA-pqgm-9g82-wcm7/GHSA-pqgm-9g82-wcm7.json b/advisories/github-reviewed/2023/10/GHSA-pqgm-9g82-wcm7/GHSA-pqgm-9g82-wcm7.json index e7309a112e7..bd308a8e6bc 100644 --- a/advisories/github-reviewed/2023/10/GHSA-pqgm-9g82-wcm7/GHSA-pqgm-9g82-wcm7.json +++ b/advisories/github-reviewed/2023/10/GHSA-pqgm-9g82-wcm7/GHSA-pqgm-9g82-wcm7.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pqgm-9g82-wcm7", - "modified": "2023-10-20T23:01:55Z", + "modified": "2024-10-01T19:27:46Z", "published": "2023-10-20T18:30:57Z", "aliases": [ "CVE-2023-5688" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [