diff --git a/advisories/github-reviewed/2023/01/GHSA-c467-5c2g-jp86/GHSA-c467-5c2g-jp86.json b/advisories/github-reviewed/2023/01/GHSA-c467-5c2g-jp86/GHSA-c467-5c2g-jp86.json index 503339ccbcf..12c8defd1d4 100644 --- a/advisories/github-reviewed/2023/01/GHSA-c467-5c2g-jp86/GHSA-c467-5c2g-jp86.json +++ b/advisories/github-reviewed/2023/01/GHSA-c467-5c2g-jp86/GHSA-c467-5c2g-jp86.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-c467-5c2g-jp86", - "modified": "2023-01-27T01:16:04Z", + "modified": "2024-09-30T20:48:18Z", "published": "2023-01-27T00:30:18Z", "aliases": [ "CVE-2023-0470" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L" } ], "affected": [ @@ -48,6 +52,10 @@ "type": "PACKAGE", "url": "https://github.com/modoboa/modoboa" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/modoboa/PYSEC-2023-30.yaml" + }, { "type": "WEB", "url": "https://huntr.dev/bounties/baae3180-b63b-4880-b2af-1a3f30056c2b" @@ -57,7 +65,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-01-27T01:16:04Z", "nvd_published_at": "2023-01-26T22:15:00Z" diff --git a/advisories/github-reviewed/2023/04/GHSA-9gxx-32p7-ff7m/GHSA-9gxx-32p7-ff7m.json b/advisories/github-reviewed/2023/04/GHSA-9gxx-32p7-ff7m/GHSA-9gxx-32p7-ff7m.json index df8a4ab13c1..5a38b51d69b 100644 --- a/advisories/github-reviewed/2023/04/GHSA-9gxx-32p7-ff7m/GHSA-9gxx-32p7-ff7m.json +++ b/advisories/github-reviewed/2023/04/GHSA-9gxx-32p7-ff7m/GHSA-9gxx-32p7-ff7m.json @@ -1,17 +1,21 @@ { "schema_version": "1.4.0", "id": "GHSA-9gxx-32p7-ff7m", - "modified": "2023-04-21T20:25:27Z", + "modified": "2024-09-30T20:47:28Z", "published": "2023-04-18T18:30:29Z", "aliases": [ "CVE-2023-2160" ], "summary": "Modoboa has Weak Password Requirements", - "details": "Modoboa 2.0.5 and prior allows users to set unsafe passwords, such as `1` or `HACK`. This issue is fixed in commit 130257c96a2392ada795785a91178e656e27015c and anticipated to be part of version 2.1.0.", + "details": "Modoboa 2.0.5 and prior allows users to set unsafe passwords, such as `1` or `HACK`. This issue is fixed in commit 130257c96a2392ada795785a91178e656e27015c and is part of version 2.1.0.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N" } ], "affected": [ @@ -28,11 +32,14 @@ "introduced": "0" }, { - "last_affected": "2.0.5" + "fixed": "2.1.0" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 2.0.5" + } } ], "references": [ @@ -48,6 +55,10 @@ "type": "PACKAGE", "url": "https://github.com/modoboa/modoboa" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/modoboa/PYSEC-2023-34.yaml" + }, { "type": "WEB", "url": "https://huntr.dev/bounties/54fb6d6a-6b39-45b6-b62a-930260ba484b"