[{"CVE":"CVE-2020-14352","severity":"important","public_date":"2020-08-13T00:00:00Z","advisories":["RHSA-2020:3749","RHBA-2020:3609","RHSA-2020:3658","RHSA-2020:3756"],"bugzilla":"1866498","bugzilla_description":"CVE-2020-14352 librepo: missing path validation in repomd.xml may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":["librepo-0:1.9.2-2.el8_0","librepo-0:1.10.3-4.el8_1","redhat-coreos-43.82.202009181853.0","librepo-0:1.11.0-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14352.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.0"},{"CVE":"CVE-2015-5302","severity":"moderate","public_date":"2015-10-15T00:00:00Z","advisories":["RHSA-2015:2504","RHSA-2015:2505"],"bugzilla":"1270903","bugzilla_description":"CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":["libreport-0:2.0.9-25.el6_7","libreport-0:2.1.11-31.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5302.json"}]