aboutcode-org / aboutcode-org/vulnerablecode
3 different advisories for same GHSA from Github GraphQL API importer
- Linguagem predominante
- Python
- Estrelas
- 702
- Forks
- 328
- Merge médio
- 3d 8h
- PRs com merge (30d)
- 3
Descrição
For GHSA issues exists, 3 different advisories for same GHSA from same datasource
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.4.13.u17"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.4.0, < 7.4.13.u17"
}
```
```
{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "4.0.33"
},
"package": {
"name": "com.liferay:com.liferay.fragment.service"
},
"vulnerableVersionRange": "< 4.0.33"
}
```
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.3.10.u4"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.3.0, < 7.3.10.u4"
}
```
What shall we do for the AVID here, since package name is also not unique here
Guia de contribuição
Nenhum guia de contribuição indexado para este repositório
Avaliação
Esta issue ainda não foi avaliada.