up
This commit is contained in:
@@ -2,40 +2,9 @@
|
||||
"advisoryKey": "CVE-2024-0001",
|
||||
"affectedPackages": [
|
||||
{
|
||||
"type": "vendor",
|
||||
"identifier": "examplevendor:exampleproduct",
|
||||
"platform": "linux",
|
||||
"provenance": [
|
||||
{
|
||||
"fieldMask": [],
|
||||
"kind": "affected",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "examplevendor:exampleproduct"
|
||||
}
|
||||
],
|
||||
"statuses": [
|
||||
{
|
||||
"provenance": {
|
||||
"fieldMask": [],
|
||||
"kind": "affected-status",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "examplevendor:exampleproduct"
|
||||
},
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"provenance": {
|
||||
"fieldMask": [],
|
||||
"kind": "affected-status",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "examplevendor:exampleproduct"
|
||||
},
|
||||
"status": "not_affected"
|
||||
}
|
||||
],
|
||||
"type": "vendor",
|
||||
"versionRanges": [
|
||||
{
|
||||
"fixedVersion": "1.2.0",
|
||||
@@ -45,48 +14,131 @@
|
||||
"evr": null,
|
||||
"hasVendorExtensions": true,
|
||||
"nevra": null,
|
||||
"semVer": null,
|
||||
"semVer": {
|
||||
"constraintExpression": "version=1.0.0, < 1.2.0",
|
||||
"exactValue": null,
|
||||
"fixed": "1.2.0",
|
||||
"fixedInclusive": false,
|
||||
"introduced": "1.0.0",
|
||||
"introducedInclusive": true,
|
||||
"lastAffected": null,
|
||||
"lastAffectedInclusive": true,
|
||||
"style": "range"
|
||||
},
|
||||
"vendorExtensions": {
|
||||
"vendor": "ExampleVendor",
|
||||
"product": "ExampleProduct",
|
||||
"platform": "linux"
|
||||
"platform": "linux",
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.2.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
},
|
||||
"provenance": {
|
||||
"fieldMask": [],
|
||||
"kind": "affected-range",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "examplevendor:exampleproduct"
|
||||
"kind": "affected-range",
|
||||
"value": "examplevendor:exampleproduct",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
},
|
||||
"rangeExpression": "version=1.0.0, < 1.2.0",
|
||||
"rangeKind": "semver"
|
||||
},
|
||||
{
|
||||
"fixedVersion": null,
|
||||
"fixedVersion": "1.2.0",
|
||||
"introducedVersion": "1.2.0",
|
||||
"lastAffectedVersion": null,
|
||||
"lastAffectedVersion": "1.2.0",
|
||||
"primitives": {
|
||||
"evr": null,
|
||||
"hasVendorExtensions": true,
|
||||
"nevra": null,
|
||||
"semVer": null,
|
||||
"semVer": {
|
||||
"constraintExpression": "version=1.2.0",
|
||||
"exactValue": null,
|
||||
"fixed": "1.2.0",
|
||||
"fixedInclusive": false,
|
||||
"introduced": "1.2.0",
|
||||
"introducedInclusive": true,
|
||||
"lastAffected": "1.2.0",
|
||||
"lastAffectedInclusive": true,
|
||||
"style": "range"
|
||||
},
|
||||
"vendorExtensions": {
|
||||
"vendor": "ExampleVendor",
|
||||
"product": "ExampleProduct",
|
||||
"platform": "linux"
|
||||
"platform": "linux",
|
||||
"version": "1.2.0",
|
||||
"versionType": "semver"
|
||||
}
|
||||
},
|
||||
"provenance": {
|
||||
"fieldMask": [],
|
||||
"kind": "affected-range",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "examplevendor:exampleproduct"
|
||||
"kind": "affected-range",
|
||||
"value": "examplevendor:exampleproduct",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
},
|
||||
"rangeExpression": "version=1.2.0",
|
||||
"rangeKind": "semver"
|
||||
}
|
||||
],
|
||||
"normalizedVersions": [
|
||||
{
|
||||
"scheme": "semver",
|
||||
"type": "exact",
|
||||
"min": null,
|
||||
"minInclusive": null,
|
||||
"max": null,
|
||||
"maxInclusive": null,
|
||||
"value": "1.2.0",
|
||||
"notes": "cve:cve-2024-0001:examplevendor:exampleproduct"
|
||||
},
|
||||
{
|
||||
"scheme": "semver",
|
||||
"type": "range",
|
||||
"min": "1.0.0",
|
||||
"minInclusive": true,
|
||||
"max": "1.2.0",
|
||||
"maxInclusive": false,
|
||||
"value": null,
|
||||
"notes": "cve:cve-2024-0001:examplevendor:exampleproduct"
|
||||
}
|
||||
],
|
||||
"statuses": [
|
||||
{
|
||||
"provenance": {
|
||||
"source": "cve",
|
||||
"kind": "affected-status",
|
||||
"value": "examplevendor:exampleproduct",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
},
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"provenance": {
|
||||
"source": "cve",
|
||||
"kind": "affected-status",
|
||||
"value": "examplevendor:exampleproduct",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
},
|
||||
"status": "not_affected"
|
||||
}
|
||||
],
|
||||
"provenance": [
|
||||
{
|
||||
"source": "cve",
|
||||
"kind": "affected",
|
||||
"value": "examplevendor:exampleproduct",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
@@ -94,16 +146,18 @@
|
||||
"CVE-2024-0001",
|
||||
"GHSA-xxxx-yyyy-zzzz"
|
||||
],
|
||||
"credits": [],
|
||||
"cvssMetrics": [
|
||||
{
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "critical",
|
||||
"provenance": {
|
||||
"fieldMask": [],
|
||||
"kind": "cvss",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "cve/CVE-2024-0001"
|
||||
"kind": "cvss",
|
||||
"value": "cve/CVE-2024-0001",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
},
|
||||
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"version": "3.1"
|
||||
@@ -114,18 +168,20 @@
|
||||
"modified": "2024-09-15T12:00:00+00:00",
|
||||
"provenance": [
|
||||
{
|
||||
"fieldMask": [],
|
||||
"kind": "document",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "cve/CVE-2024-0001"
|
||||
"kind": "document",
|
||||
"value": "cve/CVE-2024-0001",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
},
|
||||
{
|
||||
"fieldMask": [],
|
||||
"kind": "mapping",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "CVE-2024-0001"
|
||||
"kind": "mapping",
|
||||
"value": "CVE-2024-0001",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
}
|
||||
],
|
||||
"published": "2024-09-10T12:00:00+00:00",
|
||||
@@ -133,11 +189,12 @@
|
||||
{
|
||||
"kind": "third-party-advisory",
|
||||
"provenance": {
|
||||
"fieldMask": [],
|
||||
"kind": "reference",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "https://cve.example.com/CVE-2024-0001"
|
||||
"kind": "reference",
|
||||
"value": "https://cve.example.com/CVE-2024-0001",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
},
|
||||
"sourceTag": null,
|
||||
"summary": null,
|
||||
@@ -146,11 +203,12 @@
|
||||
{
|
||||
"kind": "vendor-advisory",
|
||||
"provenance": {
|
||||
"fieldMask": [],
|
||||
"kind": "reference",
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"source": "cve",
|
||||
"value": "https://example.com/security/advisory"
|
||||
"kind": "reference",
|
||||
"value": "https://example.com/security/advisory",
|
||||
"decisionReason": null,
|
||||
"recordedAt": "2024-10-01T00:00:00+00:00",
|
||||
"fieldMask": []
|
||||
},
|
||||
"sourceTag": "Vendor Advisory",
|
||||
"summary": null,
|
||||
@@ -160,4 +218,4 @@
|
||||
"severity": "critical",
|
||||
"summary": "An example vulnerability allowing remote attackers to execute arbitrary code.",
|
||||
"title": "Example Product Remote Code Execution"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user