diff --git a/advisories/unreviewed/2022/05/GHSA-2r46-cwgm-vvjx/GHSA-2r46-cwgm-vvjx.json b/advisories/github-reviewed/2022/05/GHSA-2r46-cwgm-vvjx/GHSA-2r46-cwgm-vvjx.json similarity index 66% rename from advisories/unreviewed/2022/05/GHSA-2r46-cwgm-vvjx/GHSA-2r46-cwgm-vvjx.json rename to advisories/github-reviewed/2022/05/GHSA-2r46-cwgm-vvjx/GHSA-2r46-cwgm-vvjx.json index 2bc8b471e19..61d73b35bb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r46-cwgm-vvjx/GHSA-2r46-cwgm-vvjx.json +++ b/advisories/github-reviewed/2022/05/GHSA-2r46-cwgm-vvjx/GHSA-2r46-cwgm-vvjx.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-2r46-cwgm-vvjx", - "modified": "2022-05-13T01:15:04Z", + "modified": "2024-01-30T21:44:05Z", "published": "2022-05-13T01:15:04Z", "aliases": [ "CVE-2019-10279" ], + "summary": "Missing permission check in Jenkins jenkins-reviewbot Plugin", "details": "A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:jenkins-reviewbot" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "2.4.6" + } + ] + } + ] + } ], "references": [ { @@ -39,8 +58,8 @@ "CWE-862" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:44:05Z", "nvd_published_at": "2019-04-04T16:29:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-45fr-w365-f7pm/GHSA-45fr-w365-f7pm.json b/advisories/github-reviewed/2022/05/GHSA-45fr-w365-f7pm/GHSA-45fr-w365-f7pm.json similarity index 66% rename from advisories/unreviewed/2022/05/GHSA-45fr-w365-f7pm/GHSA-45fr-w365-f7pm.json rename to advisories/github-reviewed/2022/05/GHSA-45fr-w365-f7pm/GHSA-45fr-w365-f7pm.json index e7ad944e533..c69fcec397e 100644 --- a/advisories/unreviewed/2022/05/GHSA-45fr-w365-f7pm/GHSA-45fr-w365-f7pm.json +++ b/advisories/github-reviewed/2022/05/GHSA-45fr-w365-f7pm/GHSA-45fr-w365-f7pm.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-45fr-w365-f7pm", - "modified": "2022-05-13T01:17:45Z", + "modified": "2024-01-30T21:43:38Z", "published": "2022-05-13T01:17:45Z", "aliases": [ "CVE-2019-1003053" ], + "summary": "Jenkins HockeyApp Plugin stores credentials in plain text", "details": "Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:hockeyapp" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "1.4.0" + } + ] + } + ] + } ], "references": [ { @@ -39,8 +58,8 @@ "CWE-311" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:43:38Z", "nvd_published_at": "2019-04-04T16:29:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-6j5j-w6v4-rwqr/GHSA-6j5j-w6v4-rwqr.json b/advisories/github-reviewed/2022/05/GHSA-6j5j-w6v4-rwqr/GHSA-6j5j-w6v4-rwqr.json similarity index 64% rename from advisories/unreviewed/2022/05/GHSA-6j5j-w6v4-rwqr/GHSA-6j5j-w6v4-rwqr.json rename to advisories/github-reviewed/2022/05/GHSA-6j5j-w6v4-rwqr/GHSA-6j5j-w6v4-rwqr.json index 6707054bd7d..19ae5f17415 100644 --- a/advisories/unreviewed/2022/05/GHSA-6j5j-w6v4-rwqr/GHSA-6j5j-w6v4-rwqr.json +++ b/advisories/github-reviewed/2022/05/GHSA-6j5j-w6v4-rwqr/GHSA-6j5j-w6v4-rwqr.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-6j5j-w6v4-rwqr", - "modified": "2022-05-13T01:25:43Z", + "modified": "2024-01-30T21:43:14Z", "published": "2022-05-13T01:25:43Z", "aliases": [ "CVE-2019-1003078" ], + "summary": "Jenkins VMware Lab Manager Slaves Plugin vulnerable CSRF vulnerability", "details": "A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:labmanager" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "0.2.8" + } + ] + } + ] + } ], "references": [ { @@ -35,8 +54,8 @@ "CWE-352" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:43:14Z", "nvd_published_at": "2019-04-04T16:29:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-rcrv-6r7r-rr7m/GHSA-rcrv-6r7r-rr7m.json b/advisories/github-reviewed/2022/05/GHSA-rcrv-6r7r-rr7m/GHSA-rcrv-6r7r-rr7m.json similarity index 66% rename from advisories/unreviewed/2022/05/GHSA-rcrv-6r7r-rr7m/GHSA-rcrv-6r7r-rr7m.json rename to advisories/github-reviewed/2022/05/GHSA-rcrv-6r7r-rr7m/GHSA-rcrv-6r7r-rr7m.json index 8ed4175b77f..0fe089c3122 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcrv-6r7r-rr7m/GHSA-rcrv-6r7r-rr7m.json +++ b/advisories/github-reviewed/2022/05/GHSA-rcrv-6r7r-rr7m/GHSA-rcrv-6r7r-rr7m.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-rcrv-6r7r-rr7m", - "modified": "2022-05-13T01:17:45Z", + "modified": "2024-01-30T21:43:50Z", "published": "2022-05-13T01:17:45Z", "aliases": [ "CVE-2019-1003059" ], + "summary": "Missing permission check in Jenkins FTP publisher Plugin", "details": "A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jvnet.hudson.plugins:ftppublisher" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "1.2" + } + ] + } + ] + } ], "references": [ { @@ -39,8 +58,8 @@ "CWE-862" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:43:50Z", "nvd_published_at": "2019-04-04T16:29:00Z" } } \ No newline at end of file