From f9546d071038c4836bebb66ccb881538694a6913 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 8 Jan 2024 15:55:30 +0000 Subject: [PATCH] Publish Advisories GHSA-h63j-xqx6-w58r GHSA-rcvr-8whx-3m5p --- .../2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json | 7 +++++-- .../2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json | 9 ++++++--- 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/advisories/github-reviewed/2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json b/advisories/github-reviewed/2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json index c9f017112cc..7bc5dc33600 100644 --- a/advisories/github-reviewed/2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json +++ b/advisories/github-reviewed/2023/12/GHSA-h63j-xqx6-w58r/GHSA-h63j-xqx6-w58r.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-h63j-xqx6-w58r", - "modified": "2023-12-28T16:41:04Z", + "modified": "2024-01-08T15:54:10Z", "published": "2023-12-27T21:31:01Z", "aliases": [ "CVE-2023-51079" @@ -9,7 +9,10 @@ "summary": "mvel2 TimeOut error exists in the ParseTools.subCompileExpression method", "details": "A TimeOut error exists in the ParseTools.subCompileExpression method in mvel2 v2.5.0 Final.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } ], "affected": [ { diff --git a/advisories/github-reviewed/2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json b/advisories/github-reviewed/2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json index e7c7934b920..b1362bfcba5 100644 --- a/advisories/github-reviewed/2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json +++ b/advisories/github-reviewed/2023/12/GHSA-rcvr-8whx-3m5p/GHSA-rcvr-8whx-3m5p.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rcvr-8whx-3m5p", - "modified": "2024-01-03T21:42:34Z", + "modified": "2024-01-08T15:55:06Z", "published": "2023-12-30T18:30:35Z", "aliases": [ "CVE-2023-50550" @@ -9,7 +9,10 @@ "summary": "Layui cross-site scripting (XSS) vulnerability", "details": "layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ { @@ -55,7 +58,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": true,