aboutcode-org / aboutcode-org/vulnerablecode
3 different advisories for same GHSA from Github GraphQL API importer
- Lenguaje dominante
- Python
- Estrellas
- 702
- Forks
- 328
- Merge medio
- 3 d 8 h
- PR fusionados (30 d)
- 3
Descripción
For GHSA issues exists, 3 different advisories for same GHSA from same datasource
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.4.13.u17"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.4.0, < 7.4.13.u17"
}
```
```
{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "4.0.33"
},
"package": {
"name": "com.liferay:com.liferay.fragment.service"
},
"vulnerableVersionRange": "< 4.0.33"
}
```
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.3.10.u4"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.3.0, < 7.3.10.u4"
}
```
What shall we do for the AVID here, since package name is also not unique here
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Evaluación
Este issue todavía no se ha evaluado.