From f469825e86043d5433d405d6b07e376d6c639024 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 7 Jul 2023 19:08:39 +0000
Subject: [PATCH] Publish GHSA-44p8-c3wv-f28r

---
 .../GHSA-44p8-c3wv-f28r.json                  | 32 ++++++++++++++++---
 1 file changed, 27 insertions(+), 5 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2022/05/GHSA-44p8-c3wv-f28r/GHSA-44p8-c3wv-f28r.json (52%)

diff --git a/advisories/unreviewed/2022/05/GHSA-44p8-c3wv-f28r/GHSA-44p8-c3wv-f28r.json b/advisories/github-reviewed/2022/05/GHSA-44p8-c3wv-f28r/GHSA-44p8-c3wv-f28r.json
similarity index 52%
rename from advisories/unreviewed/2022/05/GHSA-44p8-c3wv-f28r/GHSA-44p8-c3wv-f28r.json
rename to advisories/github-reviewed/2022/05/GHSA-44p8-c3wv-f28r/GHSA-44p8-c3wv-f28r.json
index a89bded5e84..c2a8da8ba14 100644
--- a/advisories/unreviewed/2022/05/GHSA-44p8-c3wv-f28r/GHSA-44p8-c3wv-f28r.json
+++ b/advisories/github-reviewed/2022/05/GHSA-44p8-c3wv-f28r/GHSA-44p8-c3wv-f28r.json
@@ -1,12 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-44p8-c3wv-f28r",
-  "modified": "2022-05-13T01:06:17Z",
+  "modified": "2023-07-07T19:07:21Z",
   "published": "2022-05-13T01:06:17Z",
   "aliases": [
     "CVE-2018-9110"
   ],
-  "details": "Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue exists because of an incomplete fix for CVE-2018-9109.",
+  "summary": "Directory Traversal in Studio 42 elFinder",
+  "details": "Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in `elFinder.class.php` with the `zipdl()` function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue exists because of an incomplete fix for CVE-2018-9109.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -14,7 +15,28 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "studio-42/elfinder"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.1.12"
+            },
+            {
+              "fixed": "2.1.37"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 2.1.36"
+      }
+    }
   ],
   "references": [
     {
@@ -39,8 +61,8 @@
       "CWE-22"
     ],
     "severity": "CRITICAL",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
+    "github_reviewed": true,
+    "github_reviewed_at": "2023-07-07T19:07:21Z",
     "nvd_published_at": "2018-03-28T14:29:00Z"
   }
 }
\ No newline at end of file