diff --git a/advisories/unreviewed/2022/05/GHSA-f8w9-66fp-3jgw/GHSA-f8w9-66fp-3jgw.json b/advisories/github-reviewed/2022/05/GHSA-f8w9-66fp-3jgw/GHSA-f8w9-66fp-3jgw.json similarity index 51% rename from advisories/unreviewed/2022/05/GHSA-f8w9-66fp-3jgw/GHSA-f8w9-66fp-3jgw.json rename to advisories/github-reviewed/2022/05/GHSA-f8w9-66fp-3jgw/GHSA-f8w9-66fp-3jgw.json index 80c3cd71b6b..93a4ead9ca1 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8w9-66fp-3jgw/GHSA-f8w9-66fp-3jgw.json +++ b/advisories/github-reviewed/2022/05/GHSA-f8w9-66fp-3jgw/GHSA-f8w9-66fp-3jgw.json @@ -1,12 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-f8w9-66fp-3jgw", - "modified": "2023-01-27T18:30:31Z", + "modified": "2024-01-05T18:21:48Z", "published": "2022-05-24T16:59:38Z", "aliases": [ "CVE-2019-10475" ], - "details": "A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.", + "summary": "Jenkins build-metrics Plugin reflected cross-site scripting vulnerability", + "details": "Jenkins build-metrics Plugin does not properly escape the `label` query parameter, resulting in a reflected cross-site scripting vulnerability.\n\nAs of publication of this advisory, there is no fix.", "severity": [ { "type": "CVSS_V3", @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:build-metrics" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "1.3" + } + ] + } + ] + } ], "references": [ { @@ -25,6 +44,10 @@ "type": "WEB", "url": "https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1490" }, + { + "type": "WEB", + "url": "https://plugins.jenkins.io/build-metrics/" + }, { "type": "WEB", "url": "http://packetstormsecurity.com/files/155200/Jenkins-Build-Metrics-1.3-Cross-Site-Scripting.html" @@ -39,8 +62,8 @@ "CWE-79" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-05T18:21:48Z", "nvd_published_at": "2019-10-23T13:15:00Z" } } \ No newline at end of file