Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cde260c7 by Salvatore Bonaccorso at 2020-09-07T21:21:17+02:00
Add CVE-2020-24916/yaws
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -605,8 +605,11 @@ CVE-2020-24918
RESERVED
CVE-2020-24917 (osTicket before 1.14.3 allows XSS via a crafted filename to
DraftAjaxA ...)
NOT-FOR-US: osTicket
-CVE-2020-24916
+CVE-2020-24916 [OS command injection in Yaws web server]
RESERVED
+ - yaws 2.0.8+dfsg-1
+ NOTE:
https://github.com/erlyaws/yaws/commit/799b3b526d15b7a9bc43ae97165aeb085f18fac1
+ NOTE: https://github.com/vulnbe/poc-yaws-cgi-shell-injection
CVE-2020-24915
RESERVED
CVE-2020-24914
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cde260c738fe8d61cd84ed5a3588e4d837cb2d1d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cde260c738fe8d61cd84ed5a3588e4d837cb2d1d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
