Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cb65060c by Salvatore Bonaccorso at 2023-07-16T22:34:37+02:00
Update metadata for CVE-2023-28362
Directly reference now to upstream announce and add the identifying
upstream tag to the updstream commit in the 6.1-series.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17116,9 +17116,9 @@ CVE-2023-28363
CVE-2023-28362
RESERVED
- rails <unfixed>
- NOTE:
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-28362.yml
+ NOTE:
https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
NOTE:
https://github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5
(main)
- NOTE:
https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441
(6.1-stable)
+ NOTE:
https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441
(v6.1.7.4)
CVE-2023-28361 (A Cross-site WebSocket Hijacking (CSWSH) vulnerability found
in UniFi ...)
NOT-FOR-US: UniFi OS
CVE-2023-28360 (An omission of security-relevant information vulnerability
exists in B ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb65060c0b5d8db69a35f1928282a69cdcd8b7e0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb65060c0b5d8db69a35f1928282a69cdcd8b7e0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
