diff --git a/advisories/unreviewed/2022/05/GHSA-c2fp-mpmm-cqxv/GHSA-c2fp-mpmm-cqxv.json b/advisories/github-reviewed/2022/05/GHSA-c2fp-mpmm-cqxv/GHSA-c2fp-mpmm-cqxv.json similarity index 61% rename from advisories/unreviewed/2022/05/GHSA-c2fp-mpmm-cqxv/GHSA-c2fp-mpmm-cqxv.json rename to advisories/github-reviewed/2022/05/GHSA-c2fp-mpmm-cqxv/GHSA-c2fp-mpmm-cqxv.json index 79513d9045e..117c3e8ca62 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2fp-mpmm-cqxv/GHSA-c2fp-mpmm-cqxv.json +++ b/advisories/github-reviewed/2022/05/GHSA-c2fp-mpmm-cqxv/GHSA-c2fp-mpmm-cqxv.json @@ -1,23 +1,50 @@ { "schema_version": "1.4.0", "id": "GHSA-c2fp-mpmm-cqxv", - "modified": "2022-05-17T04:53:43Z", + "modified": "2023-12-21T19:26:21Z", "published": "2022-05-17T04:53:43Z", "aliases": [ "CVE-2014-1202" ], + "summary": "Code injection via property expansion in SoapUI", "details": "The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.", "severity": [ ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "com.smartbear.soapui:soapui" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "4.6.4" + } + ] + } + ] + } ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1202" }, + { + "type": "WEB", + "url": "https://github.com/SmartBear/soapui/commit/6373165649ad74257493c69dbc0569caa7e6b4a6" + }, + { + "type": "PACKAGE", + "url": "https://github.com/SmartBear/soapui/" + }, { "type": "WEB", "url": "https://github.com/SmartBear/soapui/blob/master/RELEASENOTES.txt" @@ -33,10 +60,6 @@ { "type": "WEB", "url": "http://www.exploit-db.com/exploits/30908" - }, - { - "type": "WEB", - "url": "http://www.youtube.com/watch?v=3lCLE64rsc0" } ], "database_specific": { @@ -44,8 +67,8 @@ "CWE-94" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2023-12-21T19:26:21Z", "nvd_published_at": "2014-01-25T01:55:00Z" } } \ No newline at end of file