Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4b48072a by Salvatore Bonaccorso at 2021-01-22T23:34:56+01:00
Update information on CVE-2020-35239/cakephp
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -14700,9 +14700,9 @@ CVE-2020-35241 (FlatPress 1.0.3 is affected by
cross-site scripting (XSS) in the
CVE-2020-35240 (FluxBB 1.5.11 is affected by cross-site scripting (XSS in the
Blog Con ...)
NOT-FOR-US: FluxBB
CVE-2020-35239 (A vulnerability exists in CakePHP versions 4.0.x through
4.1.3. The Cs ...)
- - cakephp <undetermined>
- NOTE:
https://github.com/cakephp/cakephp/commit/d2da5346a6cddab284f8cf94e38f90d897595fe8
(4.0.10)
- TODO: check, possibly only introduced in 4.0.x versions
+ - cakephp <not-affected> (Vulnerable code introduced later)
+ NOTE: Fixed by:
https://github.com/cakephp/cakephp/commit/d2da5346a6cddab284f8cf94e38f90d897595fe8
(4.0.10)
+ NOTE: Introduced after:
https://github.com/cakephp/cakephp/commit/45474a4a9ca10e7c16db40180d086e4144006a9b
(3.5.0-RC1)
CVE-2020-35238
RESERVED
CVE-2020-35237
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b48072a41d14e67afd90a5f8948b8270a290cdd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4b48072a41d14e67afd90a5f8948b8270a290cdd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
