Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9f99f383 by Chris Lamb at 2020-04-22T10:49:07+01:00
Dump initial investigation observations of CVE-2020-10683 in dom4j.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4504,7 +4504,8 @@ CVE-2020-10684 (A flaw was found in Ansible Engine, all
versions 2.7.x, 2.8.x an
CVE-2020-10683 [XML External Entity vulnerability in default SAX parser]
RESERVED
- dom4j <unfixed> (bug #958055)
- NOTE:
https://github.com/dom4j/dom4j/commit/a8228522a99a02146106672a34c104adbda5c658
+ NOTE:
https://github.com/dom4j/dom4j/commit/1707bf3d898a8ada3b213acb0e3b38f16eaae73d
(the fix?)
+ NOTE:
https://github.com/dom4j/dom4j/commit/a8228522a99a02146106672a34c104adbda5c658
(post-fix refactor?)
CVE-2020-10682 (The Filemanager in CMS Made Simple 2.2.13 allows remote code
execution ...)
NOT-FOR-US: CMS Made Simple
CVE-2020-10681 (The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a
.pxd fi ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9f99f383c86d96e33e155591732cbec8c93e4897
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9f99f383c86d96e33e155591732cbec8c93e4897
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
