From c96365ae7bf3557e1b76785c56d4525b12eceef8 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 9 Jan 2024 16:24:38 +0000
Subject: [PATCH] Publish Advisories

GHSA-j6p9-hm3q-hwmj
GHSA-7rrx-375m-j6cr
---
 .../2022/05/GHSA-j6p9-hm3q-hwmj/GHSA-j6p9-hm3q-hwmj.json      | 4 ++--
 .../2022/07/GHSA-7rrx-375m-j6cr/GHSA-7rrx-375m-j6cr.json      | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2022/05/GHSA-j6p9-hm3q-hwmj/GHSA-j6p9-hm3q-hwmj.json b/advisories/github-reviewed/2022/05/GHSA-j6p9-hm3q-hwmj/GHSA-j6p9-hm3q-hwmj.json
index 0c74a0a6559..59af4d91804 100644
--- a/advisories/github-reviewed/2022/05/GHSA-j6p9-hm3q-hwmj/GHSA-j6p9-hm3q-hwmj.json
+++ b/advisories/github-reviewed/2022/05/GHSA-j6p9-hm3q-hwmj/GHSA-j6p9-hm3q-hwmj.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j6p9-hm3q-hwmj",
-  "modified": "2022-12-29T01:44:43Z",
+  "modified": "2024-01-09T16:23:16Z",
   "published": "2022-05-24T17:28:26Z",
   "aliases": [
     "CVE-2020-2268"
   ],
   "summary": "CSRF vulnerability in MongoDB Plugin",
-  "details": "A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.",
+  "details": "Jenkins MongoDB Plugin 1.3 and earlier does not perform permission checks in methods implementing form validation.\n\nThis allows attackers with Overall/Read permission to gain access to some metadata of any arbitrary files on the Jenkins controller.\n\nAdditionally, these form validation methods do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.\n\nAs of publication of this advisory, there is no fix.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/github-reviewed/2022/07/GHSA-7rrx-375m-j6cr/GHSA-7rrx-375m-j6cr.json b/advisories/github-reviewed/2022/07/GHSA-7rrx-375m-j6cr/GHSA-7rrx-375m-j6cr.json
index ad20eb97574..e690a3ef2bb 100644
--- a/advisories/github-reviewed/2022/07/GHSA-7rrx-375m-j6cr/GHSA-7rrx-375m-j6cr.json
+++ b/advisories/github-reviewed/2022/07/GHSA-7rrx-375m-j6cr/GHSA-7rrx-375m-j6cr.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7rrx-375m-j6cr",
-  "modified": "2022-12-12T19:54:35Z",
+  "modified": "2024-01-09T16:23:51Z",
   "published": "2022-07-01T00:01:07Z",
   "aliases": [
     "CVE-2022-34795"
   ],
   "summary": "Cross-site Scripting in Jenkins Deployment Dashboard Plugin",
-  "details": "Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.",
+  "details": "Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view.\n\nThis results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.\n\nAs of publication of this advisory, there is no fix.",
   "severity": [
     {
       "type": "CVSS_V3",