diff --git a/advisories/github-reviewed/2020/08/GHSA-55j9-849x-26h4/GHSA-55j9-849x-26h4.json b/advisories/github-reviewed/2020/08/GHSA-55j9-849x-26h4/GHSA-55j9-849x-26h4.json index 99c800de543..accef976af4 100644 --- a/advisories/github-reviewed/2020/08/GHSA-55j9-849x-26h4/GHSA-55j9-849x-26h4.json +++ b/advisories/github-reviewed/2020/08/GHSA-55j9-849x-26h4/GHSA-55j9-849x-26h4.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-55j9-849x-26h4", - "modified": "2021-11-19T15:35:36Z", + "modified": "2024-10-25T21:45:55Z", "published": "2020-08-21T16:30:52Z", "aliases": [ "CVE-2020-15140" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N" } ], "affected": [ @@ -51,13 +55,17 @@ { "type": "PACKAGE", "url": "https://github.com/Cog-Creators/Red-DiscordBot" + }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/red-discordbot/PYSEC-2020-265.yaml" } ], "database_specific": { "cwe_ids": [ "CWE-74" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-08-21T16:30:30Z", "nvd_published_at": "2020-08-21T17:15:00Z" diff --git a/advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json b/advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json index b666ddc13e8..55d39bd9088 100644 --- a/advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json +++ b/advisories/github-reviewed/2023/03/GHSA-24wv-mv5m-xv4h/GHSA-24wv-mv5m-xv4h.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-24wv-mv5m-xv4h", - "modified": "2023-05-17T18:44:08Z", + "modified": "2024-10-25T21:45:26Z", "published": "2023-03-26T21:30:23Z", "aliases": [ "CVE-2023-28858" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -127,7 +131,7 @@ "cwe_ids": [ "CWE-193" ], - "severity": "LOW", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-03-27T21:31:45Z", "nvd_published_at": "2023-03-26T19:15:00Z" diff --git a/advisories/github-reviewed/2023/03/GHSA-8fww-64cx-x8p5/GHSA-8fww-64cx-x8p5.json b/advisories/github-reviewed/2023/03/GHSA-8fww-64cx-x8p5/GHSA-8fww-64cx-x8p5.json index 6989c5cce51..bca76357e99 100644 --- a/advisories/github-reviewed/2023/03/GHSA-8fww-64cx-x8p5/GHSA-8fww-64cx-x8p5.json +++ b/advisories/github-reviewed/2023/03/GHSA-8fww-64cx-x8p5/GHSA-8fww-64cx-x8p5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8fww-64cx-x8p5", - "modified": "2023-04-06T22:55:38Z", + "modified": "2024-10-25T21:45:05Z", "published": "2023-03-26T21:30:23Z", "aliases": [ "CVE-2023-28859" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ @@ -20,11 +24,6 @@ "ecosystem": "PyPI", "name": "redis" }, - "ecosystem_specific": { - "affected_functions": [ - "redis.asyncio.client.Pipeline" - ] - }, "ranges": [ { "type": "ECOSYSTEM", @@ -44,11 +43,6 @@ "ecosystem": "PyPI", "name": "redis" }, - "ecosystem_specific": { - "affected_functions": [ - "redis.asyncio.client.Pipeline" - ] - }, "ranges": [ { "type": "ECOSYSTEM", @@ -118,7 +112,7 @@ "cwe_ids": [ "CWE-459" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-03-27T21:31:52Z", "nvd_published_at": "2023-03-26T19:15:00Z" diff --git a/advisories/github-reviewed/2024/10/GHSA-h4px-9vmp-p7pv/GHSA-h4px-9vmp-p7pv.json b/advisories/github-reviewed/2024/10/GHSA-h4px-9vmp-p7pv/GHSA-h4px-9vmp-p7pv.json new file mode 100644 index 00000000000..99e76c8604d --- /dev/null +++ b/advisories/github-reviewed/2024/10/GHSA-h4px-9vmp-p7pv/GHSA-h4px-9vmp-p7pv.json @@ -0,0 +1,58 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h4px-9vmp-p7pv", + "modified": "2024-10-25T21:46:04Z", + "published": "2024-10-25T21:31:27Z", + "aliases": [ + "CVE-2024-48218" + ], + "summary": "SQL injection in funadmin", + "details": "Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "funadmin/funadmin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "5.0.2" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48218" + }, + { + "type": "WEB", + "url": "https://github.com/funadmin/funadmin/issues/21" + }, + { + "type": "PACKAGE", + "url": "https://github.com/funadmin/funadmin" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-10-25T21:46:04Z", + "nvd_published_at": "2024-10-25T21:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-h4px-9vmp-p7pv/GHSA-h4px-9vmp-p7pv.json b/advisories/unreviewed/2024/10/GHSA-h4px-9vmp-p7pv/GHSA-h4px-9vmp-p7pv.json deleted file mode 100644 index dd0cb507081..00000000000 --- a/advisories/unreviewed/2024/10/GHSA-h4px-9vmp-p7pv/GHSA-h4px-9vmp-p7pv.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-h4px-9vmp-p7pv", - "modified": "2024-10-25T21:31:27Z", - "published": "2024-10-25T21:31:27Z", - "aliases": [ - "CVE-2024-48218" - ], - "details": "Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.", - "severity": [ - - ], - "affected": [ - - ], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48218" - }, - { - "type": "WEB", - "url": "https://github.com/funadmin/funadmin/issues/21" - } - ], - "database_specific": { - "cwe_ids": [ - - ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2024-10-25T21:15:03Z" - } -} \ No newline at end of file