diff --git a/advisories/github-reviewed/2023/11/GHSA-c35q-ffpf-5qpm/GHSA-c35q-ffpf-5qpm.json b/advisories/github-reviewed/2023/11/GHSA-c35q-ffpf-5qpm/GHSA-c35q-ffpf-5qpm.json index 32c427bc649..9ebb3f0c1bf 100644 --- a/advisories/github-reviewed/2023/11/GHSA-c35q-ffpf-5qpm/GHSA-c35q-ffpf-5qpm.json +++ b/advisories/github-reviewed/2023/11/GHSA-c35q-ffpf-5qpm/GHSA-c35q-ffpf-5qpm.json @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/ronf/asyncssh/commit/83e43f5ea3470a8617fc388c72b062c7136efd7e" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-c35q-ffpf-5qpm" + }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/asyncssh/PYSEC-2023-239.yaml" @@ -56,9 +60,17 @@ "type": "PACKAGE", "url": "https://github.com/ronf/asyncssh" }, + { + "type": "WEB", + "url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ME34ROZWMDK5KLMZKTSA422XVJZ7IMTE/" + }, + { + "type": "WEB", + "url": "https://www.terrapin-attack.com" } ], "database_specific": { diff --git a/advisories/github-reviewed/2023/11/GHSA-cfc2-wr2v-gxm5/GHSA-cfc2-wr2v-gxm5.json b/advisories/github-reviewed/2023/11/GHSA-cfc2-wr2v-gxm5/GHSA-cfc2-wr2v-gxm5.json index cdb048c41c2..ce903d97f9e 100644 --- a/advisories/github-reviewed/2023/11/GHSA-cfc2-wr2v-gxm5/GHSA-cfc2-wr2v-gxm5.json +++ b/advisories/github-reviewed/2023/11/GHSA-cfc2-wr2v-gxm5/GHSA-cfc2-wr2v-gxm5.json @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/ronf/asyncssh/commit/83e43f5ea3470a8617fc388c72b062c7136efd7e" }, + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-cfc2-wr2v-gxm5" + }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/asyncssh/PYSEC-2023-237.yaml" @@ -56,9 +60,17 @@ "type": "PACKAGE", "url": "https://github.com/ronf/asyncssh" }, + { + "type": "WEB", + "url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ME34ROZWMDK5KLMZKTSA422XVJZ7IMTE/" + }, + { + "type": "WEB", + "url": "https://www.terrapin-attack.com" } ], "database_specific": { diff --git a/advisories/github-reviewed/2023/12/GHSA-4j42-6xfx-h754/GHSA-4j42-6xfx-h754.json b/advisories/github-reviewed/2023/12/GHSA-4j42-6xfx-h754/GHSA-4j42-6xfx-h754.json index 6c64a12df03..a9021191cd2 100644 --- a/advisories/github-reviewed/2023/12/GHSA-4j42-6xfx-h754/GHSA-4j42-6xfx-h754.json +++ b/advisories/github-reviewed/2023/12/GHSA-4j42-6xfx-h754/GHSA-4j42-6xfx-h754.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4j42-6xfx-h754", - "modified": "2023-12-13T19:31:20Z", + "modified": "2023-12-18T18:38:26Z", "published": "2023-12-13T18:31:04Z", "aliases": [ "CVE-2023-50765" @@ -9,7 +9,10 @@ "summary": "Missing permission check in Jenkins Scriptler Plugin", "details": "A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a Groovy script by knowing its ID.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ { @@ -56,7 +59,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": true, diff --git a/advisories/github-reviewed/2023/12/GHSA-75mc-3pjc-727q/GHSA-75mc-3pjc-727q.json b/advisories/github-reviewed/2023/12/GHSA-75mc-3pjc-727q/GHSA-75mc-3pjc-727q.json index 5bf3dcae0b5..a6e927ede9e 100644 --- a/advisories/github-reviewed/2023/12/GHSA-75mc-3pjc-727q/GHSA-75mc-3pjc-727q.json +++ b/advisories/github-reviewed/2023/12/GHSA-75mc-3pjc-727q/GHSA-75mc-3pjc-727q.json @@ -94,7 +94,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-200" + "CWE-200", + "CWE-306" ], "severity": "LOW", "github_reviewed": true, diff --git a/advisories/github-reviewed/2023/12/GHSA-xcrr-x93h-rv4v/GHSA-xcrr-x93h-rv4v.json b/advisories/github-reviewed/2023/12/GHSA-xcrr-x93h-rv4v/GHSA-xcrr-x93h-rv4v.json index b1ef0082fb9..c33dcfe7cf0 100644 --- a/advisories/github-reviewed/2023/12/GHSA-xcrr-x93h-rv4v/GHSA-xcrr-x93h-rv4v.json +++ b/advisories/github-reviewed/2023/12/GHSA-xcrr-x93h-rv4v/GHSA-xcrr-x93h-rv4v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xcrr-x93h-rv4v", - "modified": "2023-12-13T23:13:15Z", + "modified": "2023-12-18T18:38:22Z", "published": "2023-12-13T18:31:04Z", "aliases": [ "CVE-2023-50764" @@ -9,7 +9,10 @@ "summary": "Arbitrary file deletion vulnerability in Jenkins Scriptler Plugin ", "details": "Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackers with Scriptler/Configure permission to delete arbitrary files on the Jenkins controller file system.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" + } ], "affected": [ {