From cebc57edaa873b010407f840d4aed2790edb85b3 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 22 Apr 2024 19:00:37 +0000
Subject: [PATCH] Publish Advisories

GHSA-m52m-2qpx-9j4j
GHSA-rcmj-xp8f-f6q4
---
 .../GHSA-m52m-2qpx-9j4j.json                  | 50 +++++++++++++++++--
 .../GHSA-rcmj-xp8f-f6q4.json                  | 35 ++++++++++---
 2 files changed, 75 insertions(+), 10 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json (54%)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-rcmj-xp8f-f6q4/GHSA-rcmj-xp8f-f6q4.json (70%)

diff --git a/advisories/unreviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json b/advisories/github-reviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json
similarity index 54%
rename from advisories/unreviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json
rename to advisories/github-reviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json
index 7581f41816d..dc40a98549d 100644
--- a/advisories/unreviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json
+++ b/advisories/github-reviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json
@@ -1,23 +1,65 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m52m-2qpx-9j4j",
-  "modified": "2022-05-02T03:37:58Z",
+  "modified": "2024-04-22T18:59:10Z",
   "published": "2022-05-02T03:37:58Z",
   "aliases": [
     "CVE-2009-2701"
   ],
+  "summary": "Zope Object Database (ZODB) Arbitrary files reading and deletion",
   "details": "Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors.",
   "severity": [
 
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "zodb3"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "3.8"
+            },
+            {
+              "fixed": "3.8.3"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "zodb3"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "3.9a0"
+            },
+            {
+              "fixed": "3.9.0c2"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2701"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/zodb3/PYSEC-2009-10.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html"
@@ -40,8 +82,8 @@
 
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-04-22T18:59:10Z",
     "nvd_published_at": "2009-09-08T18:30:00Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-rcmj-xp8f-f6q4/GHSA-rcmj-xp8f-f6q4.json b/advisories/github-reviewed/2022/05/GHSA-rcmj-xp8f-f6q4/GHSA-rcmj-xp8f-f6q4.json
similarity index 70%
rename from advisories/unreviewed/2022/05/GHSA-rcmj-xp8f-f6q4/GHSA-rcmj-xp8f-f6q4.json
rename to advisories/github-reviewed/2022/05/GHSA-rcmj-xp8f-f6q4/GHSA-rcmj-xp8f-f6q4.json
index d6cabd3a777..25032087196 100644
--- a/advisories/unreviewed/2022/05/GHSA-rcmj-xp8f-f6q4/GHSA-rcmj-xp8f-f6q4.json
+++ b/advisories/github-reviewed/2022/05/GHSA-rcmj-xp8f-f6q4/GHSA-rcmj-xp8f-f6q4.json
@@ -1,17 +1,39 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rcmj-xp8f-f6q4",
-  "modified": "2022-05-01T23:55:06Z",
+  "modified": "2024-04-22T18:59:28Z",
   "published": "2022-05-01T23:55:06Z",
   "aliases": [
     "CVE-2008-2951"
   ],
+  "summary": "Trac Open redirect vulnerability",
   "details": "Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "trac"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.10.5"
+            }
+          ]
+        }
+      ]
+    }
   ],
   "references": [
     {
@@ -53,11 +75,12 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-601"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-04-22T18:59:27Z",
     "nvd_published_at": "2008-07-27T22:41:00Z"
   }
 }
\ No newline at end of file