add mediawiki vector skin advisories

Signed-off-by: Weston Steimel <[email protected]>

data/anchore/2023/CVE-2023-45359.json

@@ -0,0 +1,42 @@
+{
+  "additionalMetadata": {
+    "cna": "mitre",
+    "cveId": "CVE-2023-45359",
+    "description": "An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-toggle-button-label is not escaped, but should be, because the line param can have markup.",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/skins/Vector/+/c17b956e0750e051ac7c1098e3ff625f0db82b2c",
+      "https://phabricator.wikimedia.org/T340217"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:mediawiki:vector_skin:*:*:*:*:*:mediawiki:*:*"
+        ],
+        "product": "vector_skin",
+        "repo": "https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/skins/Vector",
+        "vendor": "mediawiki",
+        "versions": [
+          {
+            "lessThan": "1.39.5",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          },
+          {
+            "lessThan": "1.40.1",
+            "status": "affected",
+            "version": "1.40.0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}

data/anchore/2023/CVE-2023-45361.json

@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "mitre",
+    "cveId": "CVE-2023-45361",
+    "description": "An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-intro-page MalformedTitleException is uncaught if it is not a valid title, leading to incorrect web pages.",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/skins/Vector/+/2a452b7e2562cba32b8a17bc91dc5abb531f0a1c",
+      "https://phabricator.wikimedia.org/T340220"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:mediawiki:vector_skin:*:*:*:*:*:mediawiki:*:*"
+        ],
+        "product": "vector_skin",
+        "repo": "https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/skins/Vector",
+        "vendor": "mediawiki",
+        "versions": [
+          {
+            "lessThan": "1.40.1",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}