From e9db96350df07a5567b0818929a0466b4b1a1388 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 19 Aug 2024 09:31:57 +0000
Subject: [PATCH] Publish Advisories

GHSA-34qv-7wjp-5q44
GHSA-59hv-jp72-r98g
---
 .../GHSA-34qv-7wjp-5q44.json                  | 31 ++++++++++++++
 .../GHSA-59hv-jp72-r98g.json                  | 42 +++++++++++++++++++
 2 files changed, 73 insertions(+)
 create mode 100644 advisories/unreviewed/2024/08/GHSA-34qv-7wjp-5q44/GHSA-34qv-7wjp-5q44.json
 create mode 100644 advisories/unreviewed/2024/08/GHSA-59hv-jp72-r98g/GHSA-59hv-jp72-r98g.json

diff --git a/advisories/unreviewed/2024/08/GHSA-34qv-7wjp-5q44/GHSA-34qv-7wjp-5q44.json b/advisories/unreviewed/2024/08/GHSA-34qv-7wjp-5q44/GHSA-34qv-7wjp-5q44.json
new file mode 100644
index 00000000000..249d2506c68
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-34qv-7wjp-5q44/GHSA-34qv-7wjp-5q44.json
@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-34qv-7wjp-5q44",
+  "modified": "2024-08-19T09:30:21Z",
+  "published": "2024-08-19T09:30:21Z",
+  "aliases": [
+    "CVE-2024-42675"
+  ],
+  "details": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42675"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-19T09:15:04Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/08/GHSA-59hv-jp72-r98g/GHSA-59hv-jp72-r98g.json b/advisories/unreviewed/2024/08/GHSA-59hv-jp72-r98g/GHSA-59hv-jp72-r98g.json
new file mode 100644
index 00000000000..6e2c79a61ba
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-59hv-jp72-r98g/GHSA-59hv-jp72-r98g.json
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-59hv-jp72-r98g",
+  "modified": "2024-08-19T09:30:21Z",
+  "published": "2024-08-19T09:30:21Z",
+  "aliases": [
+    "CVE-2024-25582"
+  ],
+  "details": "Module savepoints could be abused to inject references to malicious code delivered through the same domain. Attackers could perform malicious API requests or extract information from the users account. Exploiting this vulnerability requires temporary access to an account or successful social engineering to make a user follow a prepared link to a malicious account. Please deploy the provided updates and patch releases. The savepoint module path has been restricted to modules that provide the feature, excluding any arbitrary or non-existing modules. No publicly available exploits are known.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25582"
+    },
+    {
+      "type": "WEB",
+      "url": "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0003.json"
+    },
+    {
+      "type": "WEB",
+      "url": "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6277_7.10.6_2024-05-06.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-19T07:15:03Z"
+  }
+}
\ No newline at end of file