diff --git a/advisories/github-reviewed/2024/02/GHSA-37gx-jqx9-fwmg/GHSA-37gx-jqx9-fwmg.json b/advisories/github-reviewed/2024/02/GHSA-37gx-jqx9-fwmg/GHSA-37gx-jqx9-fwmg.json index a38bf73f151..dd5ba092d16 100644 --- a/advisories/github-reviewed/2024/02/GHSA-37gx-jqx9-fwmg/GHSA-37gx-jqx9-fwmg.json +++ b/advisories/github-reviewed/2024/02/GHSA-37gx-jqx9-fwmg/GHSA-37gx-jqx9-fwmg.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-37gx-jqx9-fwmg", - "modified": "2024-02-21T00:19:01Z", + "modified": "2024-12-02T20:28:57Z", "published": "2024-02-20T12:31:00Z", "aliases": [ "CVE-2023-49250" @@ -9,7 +9,10 @@ "summary": "Improper Certificate Validation in Apache DolphinScheduler", "details": "Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM) attack on outgoing https connections could impersonate the server.\n\nThis issue affects Apache DolphinScheduler: before 3.2.1.\n\nUsers are recommended to upgrade to version 3.2.1, which fixes the issue.\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } ], "affected": [ { diff --git a/advisories/github-reviewed/2024/02/GHSA-xh6m-7cr7-xx66/GHSA-xh6m-7cr7-xx66.json b/advisories/github-reviewed/2024/02/GHSA-xh6m-7cr7-xx66/GHSA-xh6m-7cr7-xx66.json index cd7a40cc6ec..edc0879981b 100644 --- a/advisories/github-reviewed/2024/02/GHSA-xh6m-7cr7-xx66/GHSA-xh6m-7cr7-xx66.json +++ b/advisories/github-reviewed/2024/02/GHSA-xh6m-7cr7-xx66/GHSA-xh6m-7cr7-xx66.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xh6m-7cr7-xx66", - "modified": "2024-02-29T02:29:12Z", + "modified": "2024-12-02T20:29:03Z", "published": "2024-02-27T21:54:15Z", "aliases": [ "CVE-2023-45859" @@ -153,7 +153,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-281" + "CWE-281", + "CWE-922" ], "severity": "HIGH", "github_reviewed": true, diff --git a/advisories/github-reviewed/2024/07/GHSA-6jj6-gm7p-fcvv/GHSA-6jj6-gm7p-fcvv.json b/advisories/github-reviewed/2024/07/GHSA-6jj6-gm7p-fcvv/GHSA-6jj6-gm7p-fcvv.json index 46be908c431..0577dc484f3 100644 --- a/advisories/github-reviewed/2024/07/GHSA-6jj6-gm7p-fcvv/GHSA-6jj6-gm7p-fcvv.json +++ b/advisories/github-reviewed/2024/07/GHSA-6jj6-gm7p-fcvv/GHSA-6jj6-gm7p-fcvv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6jj6-gm7p-fcvv", - "modified": "2024-07-09T21:42:28Z", + "modified": "2024-12-02T20:29:00Z", "published": "2024-07-01T20:34:50Z", "aliases": [ "CVE-2024-36401" @@ -219,6 +219,10 @@ { "type": "WEB", "url": "https://osgeo-org.atlassian.net/browse/GEOT-7587" + }, + { + "type": "WEB", + "url": "https://www.vicarius.io/vsociety/posts/geoserver-rce-cve-2024-36401" } ], "database_specific": {