Publish Advisories

GHSA-mcgw-5fhw-3fq8
GHSA-68gw-r2x5-7r5r

advisories/github-reviewed/2022/03/GHSA-mcgw-5fhw-3fq8/GHSA-mcgw-5fhw-3fq8.json

@@ -55,6 +55,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-285",
+      "CWE-862",
       "CWE-863"
     ],
     "severity": "MODERATE",

advisories/github-reviewed/2022/12/GHSA-68gw-r2x5-7r5r/GHSA-68gw-r2x5-7r5r.json

@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-68gw-r2x5-7r5r",
-  "modified": "2023-01-02T20:21:44Z",
+  "modified": "2023-06-27T20:24:50Z",
   "published": "2022-12-23T12:30:25Z",
   "aliases": [
     "CVE-2022-4686"
   ],
-  "summary": "usememos/memos Improper Authentication vulnerability",
-  "details": "Improper Authentication in GitHub repository usememos/memos prior to 0.9.0.",
+  "summary": "usememos/memos Authorization Bypass Through User-Controlled Key vulnerability",
+  "details": "Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -55,7 +55,6 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-287",
       "CWE-639"
     ],
     "severity": "CRITICAL",