conversion for postgresql records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 21, 2024 · b98a628 · b98a628
1 parent 61e52a7
commit b98a628
Show file tree

Hide file tree

Showing 5 changed files with 189 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-2044.json b/data/anchore/2024/CVE-2024-2044.json
@@ -0,0 +1,37 @@
+{
+  "additionalMetadata": {
+    "cna": "postgresql",
+    "cveId": "CVE-2024-2044",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.shielder.com/advisories/pgadmin-path-traversal_leads_to_unsafe_deserialization_and_rce/",
+      "https://github.com/pgadmin-org/pgadmin4/issues/7258",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/LUYN2JXKKHFSVTASH344TBRGWDH64XQV/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:pgadmin:pgadmin:*:*:*:*:*:postgresql:*:*",
+          "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*"
+        ],
+        "product": "pgAdmin 4",
+        "repo": "https://github.com/pgadmin-org/pgadmin4",
+        "vendor": "pgadmin.org",
+        "versions": [
+          {
+            "lessThan": "8.4",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-3116.json b/data/anchore/2024/CVE-2024-3116.json
@@ -0,0 +1,37 @@
+{
+  "additionalMetadata": {
+    "cna": "postgresql",
+    "cveId": "CVE-2024-3116",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://gist.github.com/aelmokhtar/689a8be7e3bd535ec01992d8ec7b2b98",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/GIF5T34JTTYRGIN5YPT366BDFG6452A2/",
+      "https://github.com/pgadmin-org/pgadmin4/issues/7326"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:pgadmin:pgadmin:*:*:*:*:*:postgresql:*:*",
+          "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*"
+        ],
+        "product": "pgAdmin 4",
+        "repo": "https://github.com/pgadmin-org/pgadmin4",
+        "vendor": "pgadmin.org",
+        "versions": [
+          {
+            "lessThan": "8.5",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-4215.json b/data/anchore/2024/CVE-2024-4215.json
@@ -0,0 +1,35 @@
+{
+  "additionalMetadata": {
+    "cna": "postgresql",
+    "cveId": "CVE-2024-4215",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/pgadmin-org/pgadmin4/issues/7425"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:pgadmin:pgadmin:*:*:*:*:*:postgresql:*:*",
+          "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*"
+        ],
+        "product": "pgAdmin 4",
+        "repo": "https://github.com/pgadmin-org/pgadmin4",
+        "vendor": "pgadmin.org",
+        "versions": [
+          {
+            "lessThan": "8.6",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-4216.json b/data/anchore/2024/CVE-2024-4216.json
@@ -0,0 +1,35 @@
+{
+  "additionalMetadata": {
+    "cna": "postgresql",
+    "cveId": "CVE-2024-4216",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/pgadmin-org/pgadmin4/issues/7282"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:pgadmin:pgadmin:*:*:*:*:*:postgresql:*:*",
+          "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*"
+        ],
+        "product": "pgAdmin 4",
+        "repo": "https://github.com/pgadmin-org/pgadmin4",
+        "vendor": "pgadmin.org",
+        "versions": [
+          {
+            "lessThan": "8.6",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-4317.json b/data/anchore/2024/CVE-2024-4317.json
@@ -0,0 +1,45 @@
+{
+  "additionalMetadata": {
+    "cna": "postgresql",
+    "cveId": "CVE-2024-4317",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.postgresql.org/support/security/CVE-2024-4317/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*"
+        ],
+        "product": "PostgreSQL",
+        "vendor": "n/a",
+        "versions": [
+          {
+            "lessThan": "16.3",
+            "status": "affected",
+            "version": "16",
+            "versionType": "rpm"
+          },
+          {
+            "lessThan": "15.7",
+            "status": "affected",
+            "version": "15",
+            "versionType": "rpm"
+          },
+          {
+            "lessThan": "14.12",
+            "status": "affected",
+            "version": "14",
+            "versionType": "rpm"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}