Publish Advisories

GHSA-ffp2-8p2h-4m5j
GHSA-gv5h-5655-h4mv
GHSA-r4pg-vg54-wxx4

advisories/github-reviewed/2024/11/GHSA-ffp2-8p2h-4m5j/GHSA-ffp2-8p2h-4m5j.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ffp2-8p2h-4m5j",
-  "modified": "2024-11-20T18:24:28Z",
+  "modified": "2024-11-20T19:36:11Z",
   "published": "2024-11-20T18:24:28Z",
   "aliases": [
     "CVE-2024-52796"
@@ -40,18 +40,30 @@
       "type": "WEB",
       "url": "https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-ffp2-8p2h-4m5j"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52796"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.pwpush.com/docs/proxies/#trusted-proxies"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/pglombardo/PasswordPusher"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pglombardo/PasswordPusher/releases/tag/v1.49.0"
     }
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-770"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2024-11-20T18:24:28Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-11-20T17:15:20Z"
   }
 }

advisories/github-reviewed/2024/11/GHSA-gv5h-5655-h4mv/GHSA-gv5h-5655-h4mv.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gv5h-5655-h4mv",
-  "modified": "2024-11-18T20:03:53Z",
+  "modified": "2024-11-20T19:35:50Z",
   "published": "2024-11-18T12:30:43Z",
   "aliases": [
     "CVE-2024-11319"
@@ -11,11 +11,11 @@
   "severity": [
     {
       "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"
     },
     {
       "type": "CVSS_V4",
-      "score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"
     }
   ],
   "affected": [
@@ -71,6 +71,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/django-cms/django-cms"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django-cms/PYSEC-2024-124.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://iltosec.com/blog/post/django-cms-413-stored-xss-vulnerability-exploiting-the-page-title-field"
@@ -88,7 +92,7 @@
     "cwe_ids": [
       "CWE-79"
     ],
-    "severity": "CRITICAL",
+    "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2024-11-18T20:03:53Z",
     "nvd_published_at": "2024-11-18T12:15:17Z"