diff --git a/advisories/github-reviewed/2024/12/GHSA-pr98-23f8-jwxv/GHSA-pr98-23f8-jwxv.json b/advisories/github-reviewed/2024/12/GHSA-pr98-23f8-jwxv/GHSA-pr98-23f8-jwxv.json index c71b837dd1b68..740f66bb87bff 100644 --- a/advisories/github-reviewed/2024/12/GHSA-pr98-23f8-jwxv/GHSA-pr98-23f8-jwxv.json +++ b/advisories/github-reviewed/2024/12/GHSA-pr98-23f8-jwxv/GHSA-pr98-23f8-jwxv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pr98-23f8-jwxv", - "modified": "2024-12-20T15:13:23Z", + "modified": "2024-12-20T15:13:26Z", "published": "2024-12-19T18:31:37Z", "aliases": [ "CVE-2024-12798" @@ -11,7 +11,7 @@ "severity": [ { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/RE:L/U:Clear" + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L" } ], "affected": [ @@ -28,11 +28,14 @@ "introduced": "0" }, { - "fixed": "1.5.13" + "fixed": "1.5.13,1.3.15" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "< 1.5.13" + } } ], "references": [ @@ -48,6 +51,10 @@ "type": "PACKAGE", "url": "https://github.com/qos-ch/logback" }, + { + "type": "WEB", + "url": "https://logback.qos.ch/news.html#1.3.15" + }, { "type": "WEB", "url": "https://logback.qos.ch/news.html#1.5.13"