diff --git a/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json b/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json index baf27e08f22..aeb0ec308aa 100644 --- a/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json +++ b/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9jwh-qvg7-gr59", - "modified": "2023-01-27T01:26:59Z", + "modified": "2023-10-27T23:49:54Z", "published": "2023-01-26T21:30:18Z", "aliases": [ "CVE-2023-24432" @@ -9,7 +9,10 @@ "summary": "CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials", "details": "A cross-site request forgery (CSRF) vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -46,7 +49,7 @@ "cwe_ids": [ "CWE-352" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-01-27T01:26:59Z", "nvd_published_at": "2023-01-26T21:18:00Z" diff --git a/advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json b/advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json index 077fa8a1344..970a43a4600 100644 --- a/advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json +++ b/advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-m6q8-mwf6-6mmc", - "modified": "2023-01-27T01:18:39Z", + "modified": "2023-10-27T23:50:21Z", "published": "2023-01-26T21:30:18Z", "aliases": [ "CVE-2023-24434" @@ -9,7 +9,10 @@ "summary": "CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin", "details": "A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -46,7 +49,7 @@ "cwe_ids": [ "CWE-352" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-01-27T01:18:39Z", "nvd_published_at": "2023-01-26T21:18:00Z"