From e9ebaaf4f837c4dad24ad57f82132d68b97a06a4 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 7 Jul 2023 19:10:40 +0000 Subject: [PATCH] Publish GHSA-jcgc-vxqg-85xx --- .../GHSA-jcgc-vxqg-85xx.json | 29 +++++++++++++++---- 1 file changed, 24 insertions(+), 5 deletions(-) rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json (53%) diff --git a/advisories/unreviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json b/advisories/github-reviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json similarity index 53% rename from advisories/unreviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json rename to advisories/github-reviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json index da4030fb0e5..150aab88a02 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json +++ b/advisories/github-reviewed/2022/05/GHSA-jcgc-vxqg-85xx/GHSA-jcgc-vxqg-85xx.json @@ -1,12 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-jcgc-vxqg-85xx", - "modified": "2022-05-13T01:06:16Z", + "modified": "2023-07-07T19:09:25Z", "published": "2022-05-13T01:06:16Z", "aliases": [ "CVE-2019-5884" ], - "details": "php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.", + "summary": "Sensitive Data Exposure in elFinder", + "details": "`php/elFinder.class.php` in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and `safe_mode` or `open_basedir` is not set.", "severity": [ { "type": "CVSS_V3", @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Packagist", + "name": "studio-42/elfinder" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.1.45" + } + ] + } + ] + } ], "references": [ { @@ -35,8 +54,8 @@ "CWE-200" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2023-07-07T19:09:25Z", "nvd_published_at": "2019-01-10T08:29:00Z" } } \ No newline at end of file