conversion for grafana records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 20, 2024 · ddd47a5 · ddd47a5
1 parent 7d6a1b3
commit ddd47a5
Show file tree

Hide file tree

Showing 3 changed files with 217 additions and 0 deletions.
diff --git a/data/anchore/2023/CVE-2023-6152.json b/data/anchore/2023/CVE-2023-6152.json
@@ -0,0 +1,97 @@
+{
+  "additionalMetadata": {
+    "cna": "grafana",
+    "cveId": "CVE-2023-6152",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/grafana/bugbounty/security/advisories/GHSA-3hv4-r2fm-h27f",
+      "https://grafana.com/security/security-advisories/cve-2023-6152/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Grafana",
+        "vendor": "Grafana",
+        "versions": [
+          {
+            "lessThan": "9.5.16",
+            "status": "affected",
+            "version": "2.5.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.0.11",
+            "status": "affected",
+            "version": "10.0.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.1.7",
+            "status": "affected",
+            "version": "10.1.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.2.4",
+            "status": "affected",
+            "version": "10.2.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.3.3",
+            "status": "affected",
+            "version": "10.3.0",
+            "versionType": "semver"
+          }
+        ]
+      },
+      {
+        "cpes": [
+          "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*"
+        ],
+        "product": "Grafana Enterprise",
+        "vendor": "Grafana",
+        "versions": [
+          {
+            "lessThan": "9.5.16",
+            "status": "affected",
+            "version": "2.5.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.0.11",
+            "status": "affected",
+            "version": "10.0.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.1.7",
+            "status": "affected",
+            "version": "10.1.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.2.4",
+            "status": "affected",
+            "version": "10.2.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.3.3",
+            "status": "affected",
+            "version": "10.3.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-1313.json b/data/anchore/2024/CVE-2024-1313.json
@@ -0,0 +1,63 @@
+{
+  "additionalMetadata": {
+    "cna": "grafana",
+    "cveId": "CVE-2024-1313",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://grafana.com/security/security-advisories/cve-2024-1313/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Grafana",
+        "repo": "https://github.com/grafana/grafana",
+        "vendor": "Grafana",
+        "versions": [
+          {
+            "lessThan": "9.5.18",
+            "status": "affected",
+            "version": "9.5.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.0.13",
+            "status": "affected",
+            "version": "10.0.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.1.9",
+            "status": "affected",
+            "version": "10.1.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.2.6",
+            "status": "affected",
+            "version": "10.2.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.3.5",
+            "status": "affected",
+            "version": "10.3.0",
+            "versionType": "semver"
+          },
+          {
+            "status": "unaffected",
+            "version": "10.4.0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-1442.json b/data/anchore/2024/CVE-2024-1442.json
@@ -0,0 +1,57 @@
+{
+  "additionalMetadata": {
+    "cna": "grafana",
+    "cveId": "CVE-2024-1442",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://grafana.com/security/security-advisories/cve-2024-1442/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Grafana",
+        "vendor": "Grafana",
+        "versions": [
+          {
+            "lessThan": "9.5.7",
+            "status": "affected",
+            "version": "8.5.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.0.12",
+            "status": "affected",
+            "version": "10.0.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.1.8",
+            "status": "affected",
+            "version": "10.1.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.2.5",
+            "status": "affected",
+            "version": "10.2.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "10.3.4",
+            "status": "affected",
+            "version": "10.3.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}