Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
14e4609d by Salvatore Bonaccorso at 2018-06-01T23:56:02+02:00
Add CVE-2018-11652/nikto
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -41,7 +41,10 @@ CVE-2018-11654
CVE-2018-11653
RESERVED
CVE-2018-11652 (CSV Injection vulnerability in Nikto 2.1.6 and earlier allows
remote ...)
- TODO: check
+ - nikto <unfixed>
+ [stretch] - nikto <no-dsa> (non-free not supported)
+ [jessie] - nikto <no-dsa> (non-free not supported)
+ NOTE:
https://github.com/sullo/nikto/commit/e759b3300aace5314fe3d30800c8bd83c81c29f7
CVE-2018-11651 (Graylog before v2.4.4 has an XSS security issue with unescaped
text in ...)
TODO: check
CVE-2018-11650 (Graylog before v2.4.4 has an XSS security issue with unescaped
text in ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/14e4609df52e58e7141dc74388660867bc8a2df2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/14e4609df52e58e7141dc74388660867bc8a2df2
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
