From 2c200325aac5206ff018298d4edaad1ed103e480 Mon Sep 17 00:00:00 2001 From: Filipe Marques Date: Mon, 4 May 2026 17:15:24 +0100 Subject: [PATCH] Improve GHSA-x73w-g8hx-v7rp --- .../2023/01/GHSA-x73w-g8hx-v7rp/GHSA-x73w-g8hx-v7rp.json | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2023/01/GHSA-x73w-g8hx-v7rp/GHSA-x73w-g8hx-v7rp.json b/advisories/github-reviewed/2023/01/GHSA-x73w-g8hx-v7rp/GHSA-x73w-g8hx-v7rp.json index c0202b8c10e6e..434470030ad33 100644 --- a/advisories/github-reviewed/2023/01/GHSA-x73w-g8hx-v7rp/GHSA-x73w-g8hx-v7rp.json +++ b/advisories/github-reviewed/2023/01/GHSA-x73w-g8hx-v7rp/GHSA-x73w-g8hx-v7rp.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-x73w-g8hx-v7rp", - "modified": "2023-01-28T01:18:11Z", + "modified": "2023-01-28T01:18:12Z", "published": "2023-01-20T21:30:32Z", "aliases": [ "CVE-2020-23256" ], - "summary": "Code injection in electerm", - "details": "An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.", + "summary": "Command injection in electerm", + "details": "An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary commands via unverified request to electerms service.", "severity": [ { "type": "CVSS_V3", @@ -51,7 +51,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-94" + "CWE-306", + "CWE-78" ], "severity": "CRITICAL", "github_reviewed": true,