convert GitLab records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 17, 2024 · 5a17ca3 · 5a17ca3
1 parent 1e96d4e
commit 5a17ca3
Show file tree

Hide file tree

Showing 23 changed files with 1,081 additions and 1 deletion.
diff --git a/data/anchore/2023/CVE-2023-6175.json b/data/anchore/2023/CVE-2023-6175.json
@@ -0,0 +1,43 @@
+{
+  "additionalMetadata": {
+    "cna": "gitlab",
+    "cveId": "CVE-2023-6175",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://gitlab.com/wireshark/wireshark/-/issues/19404",
+      "https://www.wireshark.org/security/wnpa-sec-2023-29.html"
+    ],
+    "solutions": [
+      "Upgrade to versions 4.0.11, 3.6.19 or above."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Wireshark",
+        "vendor": "Wireshark Foundation",
+        "versions": [
+          {
+            "lessThan": "4.0.11",
+            "status": "affected",
+            "version": "4.0.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.6.19",
+            "status": "affected",
+            "version": "3.6.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-6371.json b/data/anchore/2023/CVE-2023-6371.json
@@ -0,0 +1,51 @@
+{
+  "additionalMetadata": {
+    "cna": "gitlab",
+    "cveId": "CVE-2023-6371",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://gitlab.com/gitlab-org/gitlab/-/issues/433021",
+      "https://hackerone.com/reports/2257080"
+    ],
+    "solutions": [
+      "Upgrade to versions 16.10.1, 16.9.3, 16.8.5 or above."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:community:*:*",
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:enterprise:*:*"
+        ],
+        "product": "GitLab",
+        "repo": "git://[email protected]:gitlab-org/gitlab.git",
+        "vendor": "GitLab",
+        "versions": [
+          {
+            "lessThan": "16.8.5",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.9.3",
+            "status": "affected",
+            "version": "16.9",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.10.1",
+            "status": "affected",
+            "version": "16.10",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-6489.json b/data/anchore/2023/CVE-2023-6489.json
@@ -0,0 +1,51 @@
+{
+  "additionalMetadata": {
+    "cna": "gitlab",
+    "cveId": "CVE-2023-6489",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://hackerone.com/reports/2262450",
+      "https://gitlab.com/gitlab-org/gitlab/-/issues/433520"
+    ],
+    "solutions": [
+      "Upgrade to versions 16.8.6, 16.9.4, 16.10.2 or above."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:community:*:*",
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:enterprise:*:*"
+        ],
+        "product": "GitLab",
+        "repo": "git://[email protected]:gitlab-org/gitlab.git",
+        "vendor": "GitLab",
+        "versions": [
+          {
+            "lessThan": "16.8.6",
+            "status": "affected",
+            "version": "16.7.7",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.9.4",
+            "status": "affected",
+            "version": "16.9",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.10.2",
+            "status": "affected",
+            "version": "16.10",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-6678.json b/data/anchore/2023/CVE-2023-6678.json
@@ -0,0 +1,51 @@
+{
+  "additionalMetadata": {
+    "cna": "gitlab",
+    "cveId": "CVE-2023-6678",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://gitlab.com/gitlab-org/gitlab/-/issues/434689",
+      "https://hackerone.com/reports/2268037"
+    ],
+    "solutions": [
+      "Upgrade to versions 16.10.2, 16.9.4, 16.8.6 or above."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:community:*:*",
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:enterprise:*:*"
+        ],
+        "product": "GitLab",
+        "repo": "git://[email protected]:gitlab-org/gitlab.git",
+        "vendor": "GitLab",
+        "versions": [
+          {
+            "lessThan": "16.8.6",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.9.4",
+            "status": "affected",
+            "version": "16.9",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.10.2",
+            "status": "affected",
+            "version": "16.10",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-6682.json b/data/anchore/2023/CVE-2023-6682.json
@@ -0,0 +1,51 @@
+{
+  "additionalMetadata": {
+    "cna": "gitlab",
+    "cveId": "CVE-2023-6682",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://hackerone.com/reports/2269012",
+      "https://gitlab.com/gitlab-org/gitlab/-/issues/434821"
+    ],
+    "solutions": [
+      "Upgrade to versions 16.9.7, 16.10.5, 16.11.2 or above."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:community:*:*",
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:enterprise:*:*"
+        ],
+        "product": "GitLab",
+        "repo": "git://[email protected]:gitlab-org/gitlab.git",
+        "vendor": "GitLab",
+        "versions": [
+          {
+            "lessThan": "16.9.7",
+            "status": "affected",
+            "version": "16.9",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.10.5",
+            "status": "affected",
+            "version": "16.10",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.11.2",
+            "status": "affected",
+            "version": "16.11",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-6688.json b/data/anchore/2023/CVE-2023-6688.json
@@ -0,0 +1,39 @@
+{
+  "additionalMetadata": {
+    "cna": "gitlab",
+    "cveId": "CVE-2023-6688",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://hackerone.com/reports/2270362",
+      "https://gitlab.com/gitlab-org/gitlab/-/issues/434854"
+    ],
+    "solutions": [
+      "Upgrade to versions 16.11.2 or above."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:community:*:*",
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:enterprise:*:*"
+        ],
+        "product": "GitLab",
+        "repo": "git://[email protected]:gitlab-org/gitlab.git",
+        "vendor": "GitLab",
+        "versions": [
+          {
+            "lessThan": "16.11.2",
+            "status": "affected",
+            "version": "16.11",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-0199.json b/data/anchore/2024/CVE-2024-0199.json
@@ -0,0 +1,52 @@
+{
+  "additionalMetadata": {
+    "cna": "gitlab",
+    "cveId": "CVE-2024-0199",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://gitlab.com/gitlab-org/gitlab/-/issues/436977",
+      "https://about.gitlab.com/releases/2024/03/06/security-release-gitlab-16-9-2-released/",
+      "https://hackerone.com/reports/2295423"
+    ],
+    "solutions": [
+      "Upgrade to versions 16.7.7, 16.8.4, 16.9.2 or above."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:community:*:*",
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:enterprise:*:*"
+        ],
+        "product": "GitLab",
+        "repo": "git://[email protected]:gitlab-org/gitlab.git",
+        "vendor": "GitLab",
+        "versions": [
+          {
+            "lessThan": "16.7.7",
+            "status": "affected",
+            "version": "11.3",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.8.4",
+            "status": "affected",
+            "version": "16.8",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.9.2",
+            "status": "affected",
+            "version": "16.9",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-1299.json b/data/anchore/2024/CVE-2024-1299.json
@@ -0,0 +1,46 @@
+{
+  "additionalMetadata": {
+    "cna": "gitlab",
+    "cveId": "CVE-2024-1299",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://about.gitlab.com/releases/2024/03/06/security-release-gitlab-16-9-2-released/",
+      "https://hackerone.com/reports/2356976",
+      "https://gitlab.com/gitlab-org/gitlab/-/issues/440745"
+    ],
+    "solutions": [
+      "Upgrade to versions 16.8.4, 16.9.2 or above."
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:community:*:*",
+          "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:enterprise:*:*"
+        ],
+        "product": "GitLab",
+        "repo": "git://[email protected]:gitlab-org/gitlab.git",
+        "vendor": "GitLab",
+        "versions": [
+          {
+            "lessThan": "16.8.4",
+            "status": "affected",
+            "version": "16.8",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "16.9.2",
+            "status": "affected",
+            "version": "16.9",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}