diff --git a/advisories/github-reviewed/2022/05/GHSA-j67j-8hrp-76xm/GHSA-j67j-8hrp-76xm.json b/advisories/github-reviewed/2022/05/GHSA-j67j-8hrp-76xm/GHSA-j67j-8hrp-76xm.json index 8dd8e364c52..de57be5bd3f 100644 --- a/advisories/github-reviewed/2022/05/GHSA-j67j-8hrp-76xm/GHSA-j67j-8hrp-76xm.json +++ b/advisories/github-reviewed/2022/05/GHSA-j67j-8hrp-76xm/GHSA-j67j-8hrp-76xm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-j67j-8hrp-76xm", - "modified": "2023-08-29T18:25:18Z", + "modified": "2024-10-18T21:57:26Z", "published": "2022-05-17T04:49:44Z", "aliases": [ "CVE-2013-4195" @@ -12,13 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "plone" + "name": "Plone" }, "ranges": [ { @@ -40,7 +44,7 @@ { "package": { "ecosystem": "PyPI", - "name": "plone" + "name": "Plone" }, "ranges": [ { @@ -59,7 +63,7 @@ { "package": { "ecosystem": "PyPI", - "name": "plone" + "name": "Plone" }, "ranges": [ { @@ -89,6 +93,10 @@ "type": "PACKAGE", "url": "https://github.com/plone/Plone" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-59.yaml" + }, { "type": "WEB", "url": "http://plone.org/products/plone-hotfix/releases/20130618" @@ -106,7 +114,7 @@ "cwe_ids": [ "CWE-601" ], - "severity": "MODERATE", + "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-08-29T18:25:18Z", "nvd_published_at": "2014-03-11T19:37:00Z" diff --git a/advisories/github-reviewed/2022/05/GHSA-qjxf-6pr8-j87v/GHSA-qjxf-6pr8-j87v.json b/advisories/github-reviewed/2022/05/GHSA-qjxf-6pr8-j87v/GHSA-qjxf-6pr8-j87v.json index 41dc0f705d9..40e2bf862ef 100644 --- a/advisories/github-reviewed/2022/05/GHSA-qjxf-6pr8-j87v/GHSA-qjxf-6pr8-j87v.json +++ b/advisories/github-reviewed/2022/05/GHSA-qjxf-6pr8-j87v/GHSA-qjxf-6pr8-j87v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qjxf-6pr8-j87v", - "modified": "2024-04-29T16:39:16Z", + "modified": "2024-10-18T21:56:46Z", "published": "2022-05-17T04:49:45Z", "aliases": [ "CVE-2013-4198" @@ -9,7 +9,14 @@ "summary": "Plone's authenticated users able to alter their password despite of policy definition", "details": "`mail_password.py` in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -83,6 +90,10 @@ "type": "PACKAGE", "url": "https://github.com/plone/Plone" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-62.yaml" + }, { "type": "WEB", "url": "https://pypi.org/project/Products.PloneHotfix20130618" @@ -102,7 +113,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-863" ], "severity": "MODERATE", "github_reviewed": true, diff --git a/advisories/github-reviewed/2022/05/GHSA-qphh-5fv5-2mjj/GHSA-qphh-5fv5-2mjj.json b/advisories/github-reviewed/2022/05/GHSA-qphh-5fv5-2mjj/GHSA-qphh-5fv5-2mjj.json index 4c0949499b9..63c76f34f83 100644 --- a/advisories/github-reviewed/2022/05/GHSA-qphh-5fv5-2mjj/GHSA-qphh-5fv5-2mjj.json +++ b/advisories/github-reviewed/2022/05/GHSA-qphh-5fv5-2mjj/GHSA-qphh-5fv5-2mjj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qphh-5fv5-2mjj", - "modified": "2023-08-29T18:27:16Z", + "modified": "2024-10-18T21:55:32Z", "published": "2022-05-17T04:49:45Z", "aliases": [ "CVE-2013-4196" @@ -12,13 +12,17 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "plone" + "name": "Plone" }, "ranges": [ { @@ -40,7 +44,7 @@ { "package": { "ecosystem": "PyPI", - "name": "plone" + "name": "Plone" }, "ranges": [ { @@ -59,7 +63,7 @@ { "package": { "ecosystem": "PyPI", - "name": "plone" + "name": "Plone" }, "ranges": [ { @@ -89,6 +93,10 @@ "type": "PACKAGE", "url": "https://github.com/plone/Plone" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2014-60.yaml" + }, { "type": "WEB", "url": "http://plone.org/products/plone-hotfix/releases/20130618"