diff --git a/advisories/github-reviewed/2023/06/GHSA-298m-hvgh-x9cw/GHSA-298m-hvgh-x9cw.json b/advisories/github-reviewed/2023/06/GHSA-298m-hvgh-x9cw/GHSA-298m-hvgh-x9cw.json index d2b058b5684..b02a3018bec 100644 --- a/advisories/github-reviewed/2023/06/GHSA-298m-hvgh-x9cw/GHSA-298m-hvgh-x9cw.json +++ b/advisories/github-reviewed/2023/06/GHSA-298m-hvgh-x9cw/GHSA-298m-hvgh-x9cw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-298m-hvgh-x9cw", - "modified": "2023-06-21T22:09:49Z", + "modified": "2023-06-27T21:59:30Z", "published": "2023-06-20T15:31:09Z", "aliases": [ "CVE-2020-21485" @@ -9,7 +9,10 @@ "summary": "Alluxio Cross Site Scripting vulnerability", "details": "Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ { diff --git a/advisories/github-reviewed/2023/06/GHSA-4cw3-rhqx-vqwr/GHSA-4cw3-rhqx-vqwr.json b/advisories/github-reviewed/2023/06/GHSA-4cw3-rhqx-vqwr/GHSA-4cw3-rhqx-vqwr.json index 5020bfbcdbb..273914d5a6e 100644 --- a/advisories/github-reviewed/2023/06/GHSA-4cw3-rhqx-vqwr/GHSA-4cw3-rhqx-vqwr.json +++ b/advisories/github-reviewed/2023/06/GHSA-4cw3-rhqx-vqwr/GHSA-4cw3-rhqx-vqwr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4cw3-rhqx-vqwr", - "modified": "2023-06-21T18:36:51Z", + "modified": "2023-06-27T21:58:46Z", "published": "2023-06-20T15:31:08Z", "aliases": [ "CVE-2020-20726" @@ -9,7 +9,10 @@ "summary": "GilaCMS Cross Site Request Forgery vulnerability", "details": "Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the `cm/update_rows/user` parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -50,7 +53,7 @@ "cwe_ids": [ "CWE-352" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-06-21T18:36:51Z", "nvd_published_at": null diff --git a/advisories/github-reviewed/2023/06/GHSA-6vf2-mfmr-qqqw/GHSA-6vf2-mfmr-qqqw.json b/advisories/github-reviewed/2023/06/GHSA-6vf2-mfmr-qqqw/GHSA-6vf2-mfmr-qqqw.json index 842bd31302b..c435f7ec8b0 100644 --- a/advisories/github-reviewed/2023/06/GHSA-6vf2-mfmr-qqqw/GHSA-6vf2-mfmr-qqqw.json +++ b/advisories/github-reviewed/2023/06/GHSA-6vf2-mfmr-qqqw/GHSA-6vf2-mfmr-qqqw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6vf2-mfmr-qqqw", - "modified": "2023-06-21T22:09:36Z", + "modified": "2023-06-27T21:59:44Z", "published": "2023-06-20T15:31:09Z", "aliases": [ "CVE-2020-21489" @@ -9,7 +9,10 @@ "summary": "Liufee CMS File Upload vulnerability", "details": "File Upload vulnerability in Liufee CMS, AKA Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the `/admin/index.php?r=admin-user%2Fupdate-self` component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -52,9 +55,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-434" ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-06-21T22:09:36Z", "nvd_published_at": null diff --git a/advisories/github-reviewed/2023/06/GHSA-gqr4-cvf4-3957/GHSA-gqr4-cvf4-3957.json b/advisories/github-reviewed/2023/06/GHSA-gqr4-cvf4-3957/GHSA-gqr4-cvf4-3957.json index 51be7a1a30f..ce587b21c54 100644 --- a/advisories/github-reviewed/2023/06/GHSA-gqr4-cvf4-3957/GHSA-gqr4-cvf4-3957.json +++ b/advisories/github-reviewed/2023/06/GHSA-gqr4-cvf4-3957/GHSA-gqr4-cvf4-3957.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gqr4-cvf4-3957", - "modified": "2023-06-21T22:09:54Z", + "modified": "2023-06-27T21:59:25Z", "published": "2023-06-20T15:31:08Z", "aliases": [ "CVE-2020-21246" @@ -9,7 +9,10 @@ "summary": "YiiCMS Cross Site Scripting vulnerability", "details": "Cross Site Scripting vulnerability in YiiCMS v.1.2.0 and prior allows a remote attacker to execute arbitrary code via the news function. A fix is available at commit 4a9d68564eb78d9f64e3f5dd77186a154093615b.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ { diff --git a/advisories/github-reviewed/2023/06/GHSA-q3q5-qvh5-cmw5/GHSA-q3q5-qvh5-cmw5.json b/advisories/github-reviewed/2023/06/GHSA-q3q5-qvh5-cmw5/GHSA-q3q5-qvh5-cmw5.json index f5b191db24c..271ebf82bb5 100644 --- a/advisories/github-reviewed/2023/06/GHSA-q3q5-qvh5-cmw5/GHSA-q3q5-qvh5-cmw5.json +++ b/advisories/github-reviewed/2023/06/GHSA-q3q5-qvh5-cmw5/GHSA-q3q5-qvh5-cmw5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q3q5-qvh5-cmw5", - "modified": "2023-06-21T22:09:57Z", + "modified": "2023-06-27T21:59:07Z", "published": "2023-06-20T15:31:08Z", "aliases": [ "CVE-2020-21174" @@ -9,7 +9,10 @@ "summary": "liufee CMS File Upload vulnerability", "details": "File Upload vulnerability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -52,9 +55,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-434" ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-06-21T22:09:57Z", "nvd_published_at": null