From f3ada3f213adba57662404bc6fc5d85d2bcd9f64 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 2 Oct 2023 19:42:19 +0000
Subject: [PATCH] Publish GHSA-35rx-7pc8-6963

---
 .../GHSA-35rx-7pc8-6963.json                    | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2022/10/GHSA-35rx-7pc8-6963/GHSA-35rx-7pc8-6963.json b/advisories/github-reviewed/2022/10/GHSA-35rx-7pc8-6963/GHSA-35rx-7pc8-6963.json
index 16a68609669..fcdaa845db9 100644
--- a/advisories/github-reviewed/2022/10/GHSA-35rx-7pc8-6963/GHSA-35rx-7pc8-6963.json
+++ b/advisories/github-reviewed/2022/10/GHSA-35rx-7pc8-6963/GHSA-35rx-7pc8-6963.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-35rx-7pc8-6963",
-  "modified": "2022-12-16T19:45:04Z",
+  "modified": "2023-10-02T19:41:02Z",
   "published": "2022-10-19T19:00:18Z",
   "aliases": [
     "CVE-2022-43419"
   ],
   "summary": "API keys stored in plain text by Jenkins Katalon Plugin",
-  "details": "Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThese API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.\n\nKatalon Plugin 1.0.33 no longer stores the API keys directly, instead accessing them through its [Credentials Plugin](https://plugins.jenkins.io/credentials) integration, once affected job configurations are saved again.",
+  "details": "Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThese API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.\n\nKatalon Plugin 1.0.33 no longer stores the API keys directly, instead accessing them through its [Credentials Plugin](https://plugins.jenkins.io/credentials) integration, once affected job configurations are saved again.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -20,6 +20,11 @@
         "ecosystem": "Maven",
         "name": "org.jenkins-ci.plugins:katalon"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -40,6 +45,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43419"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jenkinsci/katalon-plugin/pull/28"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/jenkinsci/katalon-plugin/commit/64f819387f3f14d54f3a1542578a5c7aa9feb85c"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/jenkinsci/katalon-plugin"