From dad2eb6503bbe0af6f48e3083572784cecc53164 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 11 Jun 2024 20:57:38 +0000
Subject: [PATCH] Publish Advisories

GHSA-xjm6-jfmg-qc6p
GHSA-rhc2-23c2-ww7c
---
 .../05/GHSA-xjm6-jfmg-qc6p/GHSA-xjm6-jfmg-qc6p.json    | 10 +++++++---
 .../06/GHSA-rhc2-23c2-ww7c/GHSA-rhc2-23c2-ww7c.json    | 10 +++++++---
 2 files changed, 14 insertions(+), 6 deletions(-)

diff --git a/advisories/github-reviewed/2024/05/GHSA-xjm6-jfmg-qc6p/GHSA-xjm6-jfmg-qc6p.json b/advisories/github-reviewed/2024/05/GHSA-xjm6-jfmg-qc6p/GHSA-xjm6-jfmg-qc6p.json
index 1eab186ac03..c693fd0213f 100644
--- a/advisories/github-reviewed/2024/05/GHSA-xjm6-jfmg-qc6p/GHSA-xjm6-jfmg-qc6p.json
+++ b/advisories/github-reviewed/2024/05/GHSA-xjm6-jfmg-qc6p/GHSA-xjm6-jfmg-qc6p.json
@@ -1,10 +1,10 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xjm6-jfmg-qc6p",
-  "modified": "2024-05-29T14:38:11Z",
+  "modified": "2024-06-11T20:56:12Z",
   "published": "2024-05-29T14:38:11Z",
   "aliases": [
-
+    "CVE-2024-37294"
   ],
   "summary": "Aimeos denial of service vulnerability in SaaS and marketplace setups",
   "details": "### Impact\nAll SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack\n\n### Patches\nUpgrade to the latest 2022.10 LTS, 2023.10 LTS and 2024.04.7 version of the aimeos/aimeos-core package\n",
@@ -78,6 +78,10 @@
       "type": "WEB",
       "url": "https://github.com/aimeos/aimeos-core/security/advisories/GHSA-xjm6-jfmg-qc6p"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37294"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/aimeos/aimeos-core/commit/66edb06a53e51d90e075aad1932811c53c40af6f"
@@ -114,6 +118,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2024-05-29T14:38:11Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-06-11T15:16:09Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/06/GHSA-rhc2-23c2-ww7c/GHSA-rhc2-23c2-ww7c.json b/advisories/github-reviewed/2024/06/GHSA-rhc2-23c2-ww7c/GHSA-rhc2-23c2-ww7c.json
index 9270a66184c..fd26e7cebee 100644
--- a/advisories/github-reviewed/2024/06/GHSA-rhc2-23c2-ww7c/GHSA-rhc2-23c2-ww7c.json
+++ b/advisories/github-reviewed/2024/06/GHSA-rhc2-23c2-ww7c/GHSA-rhc2-23c2-ww7c.json
@@ -1,10 +1,10 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rhc2-23c2-ww7c",
-  "modified": "2024-06-05T13:29:47Z",
+  "modified": "2024-06-11T20:56:22Z",
   "published": "2024-06-05T13:29:47Z",
   "aliases": [
-
+    "CVE-2024-37295"
   ],
   "summary": "Remote code execution in web server context",
   "details": "### Impact\nUser with administrative privileges and upload files that look like images but contain PHP code which can then be executed in the context of the web server.\n",
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/aimeos/aimeos-core/security/advisories/GHSA-rhc2-23c2-ww7c"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37295"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/aimeos/aimeos-core"
@@ -52,6 +56,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-06-05T13:29:47Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-06-11T15:16:09Z"
   }
 }
\ No newline at end of file