From 48f935339b264ff7a36545537297750ff4495795 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Thu, 30 Jul 2020 10:01:40 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2018/1xxx/CVE-2018-1285.json | 5 +++++ 2020/7xxx/CVE-2020-7699.json | 12 +++++++----- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/2018/1xxx/CVE-2018-1285.json b/2018/1xxx/CVE-2018-1285.json index 88c2057271b..fd8ef0494bf 100644 --- a/2018/1xxx/CVE-2018-1285.json +++ b/2018/1xxx/CVE-2018-1285.json @@ -78,6 +78,11 @@ "refsource": "MLIST", "name": "[logging-dev] 20200617 Re: [CVE-2018-1285] XXE vulnerability in Apache log4net", "url": "https://lists.apache.org/thread.html/r6543acafca3e2d24ff4b0c364a91540cb9378977ffa8d37a03ab4b0f@%3Cdev.logging.apache.org%3E" + }, + { + "refsource": "MLIST", + "name": "[logging-dev] 20200730 Re: [CVE-2018-1285] XXE vulnerability in Apache log4net", + "url": "https://lists.apache.org/thread.html/r7ab6b6e702f11a6f77b0db2af2d5e5532f56ae4b99b5fe73c5200b6a@%3Cdev.logging.apache.org%3E" } ] }, diff --git a/2020/7xxx/CVE-2020-7699.json b/2020/7xxx/CVE-2020-7699.json index 5da7b5c73cb..42a53594321 100644 --- a/2020/7xxx/CVE-2020-7699.json +++ b/2020/7xxx/CVE-2020-7699.json @@ -48,12 +48,14 @@ "references": { "reference_data": [ { - "refsource": "CONFIRM", - "url": "https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969" + "refsource": "MISC", + "url": "https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969", + "name": "https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969" }, { - "refsource": "CONFIRM", - "url": "https://github.com/richardgirges/express-fileupload/issues/236" + "refsource": "MISC", + "url": "https://github.com/richardgirges/express-fileupload/issues/236", + "name": "https://github.com/richardgirges/express-fileupload/issues/236" } ] }, @@ -61,7 +63,7 @@ "description_data": [ { "lang": "eng", - "value": "This affects the package express-fileupload before 1.1.8.\n If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.\n" + "value": "This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution." } ] },