diff --git a/2019/9xxx/CVE-2019-9195.json b/2019/9xxx/CVE-2019-9195.json index a2f492e4932..de1f4844b7a 100644 --- a/2019/9xxx/CVE-2019-9195.json +++ b/2019/9xxx/CVE-2019-9195.json @@ -34,7 +34,7 @@ "description_data" : [ { "lang" : "eng", - "value" : "util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files in an archive." + "value" : "util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive." } ] }, @@ -61,6 +61,11 @@ "name" : "https://github.com/mimblewimble/grin/releases/tag/v1.0.2", "refsource" : "MISC", "url" : "https://github.com/mimblewimble/grin/releases/tag/v1.0.2" + }, + { + "name" : "https://www.grin-forum.org/t/critical-vulnerability-in-grin-1-0-1-and-older-fixed-in-1-0-2/4343", + "refsource" : "MISC", + "url" : "https://www.grin-forum.org/t/critical-vulnerability-in-grin-1-0-1-and-older-fixed-in-1-0-2/4343" } ] }