diff --git a/advisories/unreviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json b/advisories/github-reviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json similarity index 53% rename from advisories/unreviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json rename to advisories/github-reviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json index da4030fb0e5..150aab88a02 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json +++ b/advisories/github-reviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json @@ -1,12 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-jcgc-vxqg-85xx", - "modified": "2022-05-13T01:06:16Z", + "modified": "2023-07-07T19:09:25Z", "published": "2022-05-13T01:06:16Z", "aliases": [ "CVE-2019-5884" ], - "details": "php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.", + "summary": "Sensitive Data Exposure in elFinder", + "details": "`php/elFinder.class.php` in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and `safe_mode` or `open_basedir` is not set.", "severity": [ { "type": "CVSS_V3", @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Packagist", + "name": "studio-42/elfinder" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.1.45" + } + ] + } + ] + } ], "references": [ { @@ -35,8 +54,8 @@ "CWE-200" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2023-07-07T19:09:25Z", "nvd_published_at": "2019-01-10T08:29:00Z" } } \ No newline at end of file