From db82e8fd837bedad172fe2a33fb0256c7e809c27 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 27 Oct 2023 23:51:21 +0000
Subject: [PATCH] Publish Advisories

GHSA-9jwh-qvg7-gr59
GHSA-m6q8-mwf6-6mmc
---
 .../2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json | 9 ++++++---
 .../2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json | 9 ++++++---
 2 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json b/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json
index baf27e08f22..aeb0ec308aa 100644
--- a/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json
+++ b/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9jwh-qvg7-gr59",
-  "modified": "2023-01-27T01:26:59Z",
+  "modified": "2023-10-27T23:49:54Z",
   "published": "2023-01-26T21:30:18Z",
   "aliases": [
     "CVE-2023-24432"
@@ -9,7 +9,10 @@
   "summary": "CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials",
   "details": "A cross-site request forgery (CSRF) vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {
@@ -46,7 +49,7 @@
     "cwe_ids": [
       "CWE-352"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2023-01-27T01:26:59Z",
     "nvd_published_at": "2023-01-26T21:18:00Z"
diff --git a/advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json b/advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json
index 077fa8a1344..970a43a4600 100644
--- a/advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json
+++ b/advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m6q8-mwf6-6mmc",
-  "modified": "2023-01-27T01:18:39Z",
+  "modified": "2023-10-27T23:50:21Z",
   "published": "2023-01-26T21:30:18Z",
   "aliases": [
     "CVE-2023-24434"
@@ -9,7 +9,10 @@
   "summary": "CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin",
   "details": "A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
     {
@@ -46,7 +49,7 @@
     "cwe_ids": [
       "CWE-352"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2023-01-27T01:18:39Z",
     "nvd_published_at": "2023-01-26T21:18:00Z"