From d41e1f4bd7ff67d0f8cc58f191148e451188f96a Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 4 Apr 2025 19:55:45 +0000 Subject: [PATCH] Publish GHSA-qcx4-gfh8-w5p5 --- .../GHSA-qcx4-gfh8-w5p5.json | 35 ++++++++++++++++--- 1 file changed, 30 insertions(+), 5 deletions(-) rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json (51%) diff --git a/advisories/unreviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json b/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json similarity index 51% rename from advisories/unreviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json rename to advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json index aaffebb5544..41deb9b982e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json +++ b/advisories/github-reviewed/2022/05/GHSA-qcx4-gfh8-w5p5/GHSA-qcx4-gfh8-w5p5.json @@ -1,19 +1,40 @@ { "schema_version": "1.4.0", "id": "GHSA-qcx4-gfh8-w5p5", - "modified": "2024-04-04T00:43:48Z", + "modified": "2025-04-04T19:54:14Z", "published": "2022-05-24T16:46:16Z", "aliases": [ "CVE-2019-12277" ], - "details": "Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname.", + "summary": "Blogifier does not properly restrict APIs", + "details": "Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for `..` in a pathname.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "NuGet", + "name": "Blogifier.Core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.4" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -22,6 +43,10 @@ { "type": "WEB", "url": "https://github.com/blogifierdotnet/Blogifier/commit/3e2ae11f6be8aab82128f223c2916fab5a408be5" + }, + { + "type": "PACKAGE", + "url": "https://github.com/blogifierdotnet/Blogifier" } ], "database_specific": { @@ -29,8 +54,8 @@ "CWE-22" ], "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-04-04T19:54:14Z", "nvd_published_at": "2019-05-22T15:29:00Z" } } \ No newline at end of file