diff --git a/advisories/unreviewed/2022/05/GHSA-3657-q433-mmpx/GHSA-3657-q433-mmpx.json b/advisories/github-reviewed/2022/05/GHSA-3657-q433-mmpx/GHSA-3657-q433-mmpx.json similarity index 63% rename from advisories/unreviewed/2022/05/GHSA-3657-q433-mmpx/GHSA-3657-q433-mmpx.json rename to advisories/github-reviewed/2022/05/GHSA-3657-q433-mmpx/GHSA-3657-q433-mmpx.json index 9876aaae439..c54dca7dc21 100644 --- a/advisories/unreviewed/2022/05/GHSA-3657-q433-mmpx/GHSA-3657-q433-mmpx.json +++ b/advisories/github-reviewed/2022/05/GHSA-3657-q433-mmpx/GHSA-3657-q433-mmpx.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-3657-q433-mmpx", - "modified": "2022-05-17T02:47:18Z", + "modified": "2024-01-10T16:53:19Z", "published": "2022-05-17T02:47:18Z", "aliases": [ "CVE-2017-8298" ], + "summary": "Canvs Canvas Cross-site Scripting (XSS) via title and content fields", "details": "cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a \"Posts > Add New\" action, and during creation of new tags and users.", "severity": [ { @@ -14,7 +15,15 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Packagist", + "name": "austintoddj/canvas" + }, + "versions": [ + "3.3.0" + ] + } ], "references": [ { @@ -24,6 +33,10 @@ { "type": "WEB", "url": "https://github.com/cnvs/canvas/issues/331" + }, + { + "type": "PACKAGE", + "url": "https://github.com/austintoddj/canvas" } ], "database_specific": { @@ -31,8 +44,8 @@ "CWE-79" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-10T16:53:19Z", "nvd_published_at": "2017-04-27T16:59:00Z" } } \ No newline at end of file