From c0487d8421ed038baf530f5664feca61089a2a6b Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 19 Nov 2024 15:52:00 +0000 Subject: [PATCH] Publish GHSA-2473-9hgq-j7xw --- .../GHSA-2473-9hgq-j7xw.json | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2020/07/GHSA-2473-9hgq-j7xw/GHSA-2473-9hgq-j7xw.json b/advisories/github-reviewed/2020/07/GHSA-2473-9hgq-j7xw/GHSA-2473-9hgq-j7xw.json index 509542c1d36..2006d51ce42 100644 --- a/advisories/github-reviewed/2020/07/GHSA-2473-9hgq-j7xw/GHSA-2473-9hgq-j7xw.json +++ b/advisories/github-reviewed/2020/07/GHSA-2473-9hgq-j7xw/GHSA-2473-9hgq-j7xw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2473-9hgq-j7xw", - "modified": "2021-01-07T23:47:06Z", + "modified": "2024-11-19T15:50:10Z", "published": "2020-07-20T17:50:30Z", "aliases": [ "CVE-2020-15118" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -25,7 +29,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "2.8.0" + "introduced": "2.8rc1" }, { "fixed": "2.9.3" @@ -75,6 +79,14 @@ "type": "WEB", "url": "https://docs.wagtail.io/en/stable/reference/contrib/forms/index.html#usage" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2020-154.yaml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/wagtail/wagtail" + }, { "type": "WEB", "url": "https://github.com/wagtail/wagtail/blob/master/docs/releases/2.9.3.rst" @@ -84,7 +96,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-07-20T17:47:32Z", "nvd_published_at": null