aboutcode-org / aboutcode-org/vulnerablecode
3 different advisories for same GHSA from Github GraphQL API importer
- 主要語言
- Python
- 星號
- 702
- 分支
- 328
- 平均合併
- 3 天 8 小時
- 30 天內合併 PR
- 3
描述
For GHSA issues exists, 3 different advisories for same GHSA from same datasource
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.4.13.u17"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.4.0, < 7.4.13.u17"
}
```
```
{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "4.0.33"
},
"package": {
"name": "com.liferay:com.liferay.fragment.service"
},
"vulnerableVersionRange": "< 4.0.33"
}
```
```{
"advisory": {
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-r5fj-j449-vqw2"
},
{
"type": "CVE",
"value": "CVE-2022-42120"
}
],
"summary": "Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42120"
},
{
"url": "https://issues.liferay.com/browse/LPE-17513"
},
{
"url": "http://liferay.com/"
},
{
"url": "https://github.com/liferay/liferay-portal/commit/6f94d203f5a194a64055e1e0ba0224d26ec54e47"
},
{
"url": "https://web.archive.org/web/20220801000000*/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120"
},
{
"url": "https://github.com/advisories/GHSA-r5fj-j449-vqw2"
}
],
"severity": "CRITICAL",
"cwes": {
"nodes": [
{
"cweId": "CWE-89"
}
]
},
"publishedAt": "2022-11-15T12:00:16Z"
},
"firstPatchedVersion": {
"identifier": "7.3.10.u4"
},
"package": {
"name": "com.liferay.portal:release.dxp.bom"
},
"vulnerableVersionRange": ">= 7.3.0, < 7.3.10.u4"
}
```
What shall we do for the AVID here, since package name is also not unique here
貢獻指南
這個儲存庫沒有索引到貢獻指南
評估
這個 Issue 還沒有評估資料。