diff --git a/advisories/unreviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json b/advisories/github-reviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json similarity index 58% rename from advisories/unreviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json rename to advisories/github-reviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json index d5320461daa..a2a116dbdbb 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json +++ b/advisories/github-reviewed/2022/05/GHSA-p6m5-h7pp-v2x5/GHSA-p6m5-h7pp-v2x5.json @@ -1,17 +1,55 @@ { "schema_version": "1.4.0", "id": "GHSA-p6m5-h7pp-v2x5", - "modified": "2022-05-02T03:47:43Z", + "modified": "2024-02-08T22:00:20Z", "published": "2022-05-02T03:47:43Z", "aliases": [ "CVE-2009-3695" ], + "summary": "Django's Insufficient Algorithmic Complexity Causes Denial of Service", "details": "Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression.", "severity": [ ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "Django" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "1.0" + }, + { + "fixed": "1.0.4" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "Django" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "1.1" + }, + { + "fixed": "1.1.1" + } + ] + } + ] + } ], "references": [ { @@ -22,6 +60,14 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53727" }, + { + "type": "PACKAGE", + "url": "https://github.com/django/django" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20200228171918/http://www.securityfocus.com/bid/36655" + }, { "type": "WEB", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550457" @@ -30,14 +76,6 @@ "type": "WEB", "url": "http://groups.google.com/group/django-users/browse_thread/thread/15df9e45118dfc51/" }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/36948" - }, - { - "type": "WEB", - "url": "http://secunia.com/advisories/36968" - }, { "type": "WEB", "url": "http://www.debian.org/security/2009/dsa-1905" @@ -49,23 +87,16 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2009/10/13/6" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/36655" - }, - { - "type": "WEB", - "url": "http://www.vupen.com/english/advisories/2009/2871" } ], "database_specific": { "cwe_ids": [ - + "CWE-400", + "CWE-407" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-02-08T22:00:20Z", "nvd_published_at": "2009-10-13T10:30:00Z" } } \ No newline at end of file