From b7bf626b75ba080b092bd06980ca5b313655a4b1 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 8 Feb 2024 22:04:26 +0000 Subject: [PATCH] Publish Advisories GHSA-2q2r-xgj5-h3hm GHSA-5pvv-f8h3-gw96 GHSA-2q2r-xgj5-h3hm --- .../GHSA-2q2r-xgj5-h3hm.json | 65 ++++++++++++++++ .../GHSA-5pvv-f8h3-gw96.json | 74 +++++++++++++++---- .../GHSA-2q2r-xgj5-h3hm.json | 35 --------- 3 files changed, 123 insertions(+), 51 deletions(-) create mode 100644 advisories/github-reviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json (67%) delete mode 100644 advisories/unreviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json diff --git a/advisories/github-reviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json b/advisories/github-reviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json new file mode 100644 index 00000000000..9a12bd0225c --- /dev/null +++ b/advisories/github-reviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json @@ -0,0 +1,65 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2q2r-xgj5-h3hm", + "modified": "2024-02-08T22:03:51Z", + "published": "2022-05-02T03:48:54Z", + "aliases": [ + "CVE-2009-3821" + ], + "summary": "Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting", + "details": "Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "apache-solr-for-typo3/solr" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.0.1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.0.0" + } + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3821" + }, + { + "type": "WEB", + "url": "https://github.com/TYPO3-Solr/ext-solr/commit/5192f489a13ff9417d7b57c63420187789beea5b" + }, + { + "type": "PACKAGE", + "url": "https://github.com/TYPO3-Solr/ext-solr" + }, + { + "type": "WEB", + "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-02-08T22:03:51Z", + "nvd_published_at": "2009-10-28T10:30:00Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json b/advisories/github-reviewed/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json similarity index 67% rename from advisories/unreviewed/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json rename to advisories/github-reviewed/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json index cbb93365171..b2a86ab871d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json +++ b/advisories/github-reviewed/2022/05/GHSA-5pvv-f8h3-gw96/GHSA-5pvv-f8h3-gw96.json @@ -1,23 +1,69 @@ { "schema_version": "1.4.0", "id": "GHSA-5pvv-f8h3-gw96", - "modified": "2022-05-02T03:47:43Z", + "modified": "2024-02-08T22:02:35Z", "published": "2022-05-02T03:47:43Z", "aliases": [ "CVE-2009-3696" ], + "summary": "phpMyAdmin Cross-site Scripting In MySQL Table Name", "details": "Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.", "severity": [ ], "affected": [ - + { + "package": { + "ecosystem": "Packagist", + "name": "phpmyadmin/phpmyadmin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.11.0" + }, + { + "fixed": "2.11.9.6" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "phpmyadmin/phpmyadmin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.2.2.1" + } + ] + } + ] + } ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3696" }, + { + "type": "WEB", + "url": "https://github.com/phpmyadmin/phpmyadmin/commit/212daad0c082dfb853e3a4098838781a96b2ce1f" + }, + { + "type": "WEB", + "url": "https://github.com/phpmyadmin/phpmyadmin/commit/8ec5434999724f61d7df1f9b0b13545274c78b1e" + }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=528769" @@ -26,6 +72,14 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53742" }, + { + "type": "PACKAGE", + "url": "https://github.com/phpmyadmin/phpmyadmin" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20200228173112/http://www.securityfocus.com/bid/36658" + }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html" @@ -66,10 +120,6 @@ "type": "WEB", "url": "http://marc.info/?l=oss-security&m=125561979001460&w=2" }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/37016" - }, { "type": "WEB", "url": "http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/" @@ -85,14 +135,6 @@ { "type": "WEB", "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/36658" - }, - { - "type": "WEB", - "url": "http://www.vupen.com/english/advisories/2009/2899" } ], "database_specific": { @@ -100,8 +142,8 @@ "CWE-79" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-02-08T22:02:34Z", "nvd_published_at": "2009-10-16T16:30:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json b/advisories/unreviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json deleted file mode 100644 index 24ace53835e..00000000000 --- a/advisories/unreviewed/2022/05/GHSA-2q2r-xgj5-h3hm/GHSA-2q2r-xgj5-h3hm.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-2q2r-xgj5-h3hm", - "modified": "2022-05-02T03:48:54Z", - "published": "2022-05-02T03:48:54Z", - "aliases": [ - "CVE-2009-3821" - ], - "details": "Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3821" - }, - { - "type": "WEB", - "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014/" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-79" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2009-10-28T10:30:00Z" - } -} \ No newline at end of file