aboutcode-org / aboutcode-org/vulnerablecode
3 different advisories for same GHSA from Github GraphQL API importer
- Vorherrschende Sprache
- Python
- Sterne
- 702
- Forks
- 328
- Ø Merge
- 3 T. 8 Std.
- Gemergte PRs (30 T.)
- 3
Beschreibung
For GHSA issues exists, 3 different advisories for same GHSA from same datasource
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.4.13.u17"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.4.0, < 7.4.13.u17"
}
```
```
{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "4.0.33"
},
"package": {
"name": "com.liferay:com.liferay.fragment.service"
},
"vulnerableVersionRange": "< 4.0.33"
}
```
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.3.10.u4"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.3.0, < 7.3.10.u4"
}
```
What shall we do for the AVID here, since package name is also not unique here
Beitragsleitfaden
Für dieses Repository ist kein Beitragsleitfaden indexiert
Bewertung
Dieses Issue wurde noch nicht bewertet.