From c3a13f73cb8cd9ef3b6997eeefc86310cbf9cf31 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 9 Oct 2024 21:09:52 +0000 Subject: [PATCH] Publish Advisories GHSA-48vv-2pmq-9fvv GHSA-j7mj-748x-7p78 --- .../GHSA-48vv-2pmq-9fvv.json | 23 ++++- .../GHSA-j7mj-748x-7p78.json | 98 +++++++++++-------- 2 files changed, 74 insertions(+), 47 deletions(-) diff --git a/advisories/github-reviewed/2018/07/GHSA-48vv-2pmq-9fvv/GHSA-48vv-2pmq-9fvv.json b/advisories/github-reviewed/2018/07/GHSA-48vv-2pmq-9fvv/GHSA-48vv-2pmq-9fvv.json index 803c4a95957..ed13e4011a4 100644 --- a/advisories/github-reviewed/2018/07/GHSA-48vv-2pmq-9fvv/GHSA-48vv-2pmq-9fvv.json +++ b/advisories/github-reviewed/2018/07/GHSA-48vv-2pmq-9fvv/GHSA-48vv-2pmq-9fvv.json @@ -1,15 +1,22 @@ { "schema_version": "1.4.0", "id": "GHSA-48vv-2pmq-9fvv", - "modified": "2021-08-31T21:48:47Z", + "modified": "2024-10-09T21:08:59Z", "published": "2018-07-23T19:51:14Z", "aliases": [ "CVE-2012-6661" ], - "summary": "Moderate severity vulnerability that affects Plone and Zope2", + "summary": "Plone and Zope2 do not reseed pseudo-random number generator", "details": "Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -94,6 +101,14 @@ "type": "WEB", "url": "https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-51.yaml" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/zope2/PYSEC-2014-76.yaml" + }, { "type": "WEB", "url": "https://plone.org/products/plone-hotfix/releases/20121124" @@ -111,7 +126,7 @@ "cwe_ids": [ "CWE-336" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-06-16T20:57:52Z", "nvd_published_at": null diff --git a/advisories/github-reviewed/2019/10/GHSA-j7mj-748x-7p78/GHSA-j7mj-748x-7p78.json b/advisories/github-reviewed/2019/10/GHSA-j7mj-748x-7p78/GHSA-j7mj-748x-7p78.json index 156dcde3a5d..e42b160a4e4 100644 --- a/advisories/github-reviewed/2019/10/GHSA-j7mj-748x-7p78/GHSA-j7mj-748x-7p78.json +++ b/advisories/github-reviewed/2019/10/GHSA-j7mj-748x-7p78/GHSA-j7mj-748x-7p78.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-j7mj-748x-7p78", - "modified": "2024-03-26T18:15:45Z", + "modified": "2024-10-09T21:07:19Z", "published": "2019-10-22T14:40:42Z", "aliases": [ "CVE-2019-16865" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -50,47 +54,7 @@ }, { "type": "WEB", - "url": "https://access.redhat.com/errata/RHSA-2020:0566" - }, - { - "type": "WEB", - "url": "https://access.redhat.com/errata/RHSA-2020:0578" - }, - { - "type": "WEB", - "url": "https://access.redhat.com/errata/RHSA-2020:0580" - }, - { - "type": "WEB", - "url": "https://access.redhat.com/errata/RHSA-2020:0681" - }, - { - "type": "WEB", - "url": "https://access.redhat.com/errata/RHSA-2020:0683" - }, - { - "type": "WEB", - "url": "https://access.redhat.com/errata/RHSA-2020:0694" - }, - { - "type": "PACKAGE", - "url": "https://github.com/python-pillow/Pillow" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EMJBUZQGQ2Q7HXYCQVRLU7OXNC7CAWWU" - }, - { - "type": "WEB", - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYDXD7EE4YAEVSTNIFZKNVPRVJX5ZOG3" - }, - { - "type": "WEB", - "url": "https://pillow.readthedocs.io/en/latest/releasenotes/6.2.0.html" - }, - { - "type": "WEB", - "url": "https://ubuntu.com/security/notices/USN-4272-1" + "url": "https://www.debian.org/security/2020/dsa-4631" }, { "type": "WEB", @@ -98,7 +62,55 @@ }, { "type": "WEB", - "url": "https://www.debian.org/security/2020/dsa-4631" + "url": "https://ubuntu.com/security/notices/USN-4272-1" + }, + { + "type": "WEB", + "url": "https://pillow.readthedocs.io/en/latest/releasenotes/6.2.0.html" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYDXD7EE4YAEVSTNIFZKNVPRVJX5ZOG3" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EMJBUZQGQ2Q7HXYCQVRLU7OXNC7CAWWU" + }, + { + "type": "PACKAGE", + "url": "https://github.com/python-pillow/Pillow" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2019-110.yaml" + }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-j7mj-748x-7p78" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2020:0694" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2020:0683" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2020:0681" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2020:0580" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2020:0578" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2020:0566" } ], "database_specific": {