aboutcode-org / aboutcode-org/vulnerablecode
3 different advisories for same GHSA from Github GraphQL API importer
- Langage dominant
- Python
- Étoiles
- 702
- Forks
- 328
- Merge moyen
- 3 j 8 h
- PR mergées (30 j)
- 3
Description
For GHSA issues exists, 3 different advisories for same GHSA from same datasource
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.4.13.u17"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.4.0, < 7.4.13.u17"
}
```
```
{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "4.0.33"
},
"package": {
"name": "com.liferay:com.liferay.fragment.service"
},
"vulnerableVersionRange": "< 4.0.33"
}
```
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.3.10.u4"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.3.0, < 7.3.10.u4"
}
```
What shall we do for the AVID here, since package name is also not unique here
Guide de contribution
Aucun guide de contribution indexé pour ce dépôt
Évaluation
Cette issue n'a pas encore été évaluée.