From f3ab3623472270473eeeec712876a0fec74cb93c Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 27 Jun 2023 19:51:34 +0000 Subject: [PATCH] Publish Advisories GHSA-4xf2-7qfv-mgfx GHSA-7q8c-49f4-4c8q GHSA-f4m6-x2xj-jc7w GHSA-rx62-5cw6-x29q --- .../06/GHSA-4xf2-7qfv-mgfx/GHSA-4xf2-7qfv-mgfx.json | 2 +- .../06/GHSA-7q8c-49f4-4c8q/GHSA-7q8c-49f4-4c8q.json | 11 +++++++---- .../06/GHSA-f4m6-x2xj-jc7w/GHSA-f4m6-x2xj-jc7w.json | 2 +- .../06/GHSA-rx62-5cw6-x29q/GHSA-rx62-5cw6-x29q.json | 4 ++++ 4 files changed, 13 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2023/06/GHSA-4xf2-7qfv-mgfx/GHSA-4xf2-7qfv-mgfx.json b/advisories/github-reviewed/2023/06/GHSA-4xf2-7qfv-mgfx/GHSA-4xf2-7qfv-mgfx.json index f9618d0308b..b9df5f650ec 100644 --- a/advisories/github-reviewed/2023/06/GHSA-4xf2-7qfv-mgfx/GHSA-4xf2-7qfv-mgfx.json +++ b/advisories/github-reviewed/2023/06/GHSA-4xf2-7qfv-mgfx/GHSA-4xf2-7qfv-mgfx.json @@ -59,7 +59,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], "severity": "HIGH", "github_reviewed": true, diff --git a/advisories/github-reviewed/2023/06/GHSA-7q8c-49f4-4c8q/GHSA-7q8c-49f4-4c8q.json b/advisories/github-reviewed/2023/06/GHSA-7q8c-49f4-4c8q/GHSA-7q8c-49f4-4c8q.json index 85a1039bf4a..b52b6993e26 100644 --- a/advisories/github-reviewed/2023/06/GHSA-7q8c-49f4-4c8q/GHSA-7q8c-49f4-4c8q.json +++ b/advisories/github-reviewed/2023/06/GHSA-7q8c-49f4-4c8q/GHSA-7q8c-49f4-4c8q.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7q8c-49f4-4c8q", - "modified": "2023-06-20T16:09:20Z", + "modified": "2023-06-27T19:50:27Z", "published": "2023-06-19T03:30:18Z", "aliases": [ "CVE-2023-35839" @@ -9,7 +9,10 @@ "summary": "Solon vulnerable to deserialization of untrusted data", "details": "Solon before 2.3.3 allows Deserialization of Untrusted Data.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ { @@ -52,9 +55,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-502" ], - "severity": "MODERATE", + "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-06-20T16:09:20Z", "nvd_published_at": null diff --git a/advisories/github-reviewed/2023/06/GHSA-f4m6-x2xj-jc7w/GHSA-f4m6-x2xj-jc7w.json b/advisories/github-reviewed/2023/06/GHSA-f4m6-x2xj-jc7w/GHSA-f4m6-x2xj-jc7w.json index d412d1b9f2f..e874026b059 100644 --- a/advisories/github-reviewed/2023/06/GHSA-f4m6-x2xj-jc7w/GHSA-f4m6-x2xj-jc7w.json +++ b/advisories/github-reviewed/2023/06/GHSA-f4m6-x2xj-jc7w/GHSA-f4m6-x2xj-jc7w.json @@ -105,7 +105,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": true, diff --git a/advisories/github-reviewed/2023/06/GHSA-rx62-5cw6-x29q/GHSA-rx62-5cw6-x29q.json b/advisories/github-reviewed/2023/06/GHSA-rx62-5cw6-x29q/GHSA-rx62-5cw6-x29q.json index 686ee723a9a..ee7f3e6cd95 100644 --- a/advisories/github-reviewed/2023/06/GHSA-rx62-5cw6-x29q/GHSA-rx62-5cw6-x29q.json +++ b/advisories/github-reviewed/2023/06/GHSA-rx62-5cw6-x29q/GHSA-rx62-5cw6-x29q.json @@ -40,6 +40,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3308" }, + { + "type": "WEB", + "url": "https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal%3Aicefrog/icefrog_1.1.8_RCE.md" + }, { "type": "PACKAGE", "url": "https://github.com/whaleal/icefrog"