From fd84cd34c6b4e98e85cba23d56c358d0be7e3d2d Mon Sep 17 00:00:00 2001 From: sampion88 Date: Thu, 6 Feb 2025 14:44:01 +0100 Subject: [PATCH 1/2] add related cve to 2024-10110 --- vulnerabilities/AIKIDO-2024-10110.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/vulnerabilities/AIKIDO-2024-10110.json b/vulnerabilities/AIKIDO-2024-10110.json index e389ea8..ec51e80 100644 --- a/vulnerabilities/AIKIDO-2024-10110.json +++ b/vulnerabilities/AIKIDO-2024-10110.json @@ -17,11 +17,11 @@ "how_to_fix": "Upgrade `unstructured` to the patch version.", "reporter": "", "vulnerable_to": "XML External Entity Injection (XXE)", - "related_cve_id": "", + "related_cve_id": "CVE-2024-46455", "language": "python", "severity_class": "HIGH", "aikido_score": 75, "changelog": "https://github.com/Unstructured-IO/unstructured/releases/tag/0.14.3", "published": "2024-05-29", - "last_modified": "2024-05-29" + "last_modified": "2025-02-06" } \ No newline at end of file From f0d58de970193904f1e8646236546c672002766b Mon Sep 17 00:00:00 2001 From: sampion88 Date: Thu, 6 Feb 2025 14:45:04 +0100 Subject: [PATCH 2/2] add related cve to 2024-10110 --- vulnerabilities/AIKIDO-2024-10110.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/vulnerabilities/AIKIDO-2024-10110.json b/vulnerabilities/AIKIDO-2024-10110.json index ec51e80..6f87292 100644 --- a/vulnerabilities/AIKIDO-2024-10110.json +++ b/vulnerabilities/AIKIDO-2024-10110.json @@ -19,8 +19,8 @@ "vulnerable_to": "XML External Entity Injection (XXE)", "related_cve_id": "CVE-2024-46455", "language": "python", - "severity_class": "HIGH", - "aikido_score": 75, + "severity_class": "CRITICAL", + "aikido_score": 87, "changelog": "https://github.com/Unstructured-IO/unstructured/releases/tag/0.14.3", "published": "2024-05-29", "last_modified": "2025-02-06"