Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3bebbddb by Salvatore Bonaccorso at 2023-09-01T22:48:48+02:00
CVE-2023-28362: Add short description and Debian bug reference
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23608,9 +23608,9 @@ CVE-2023-28364 (An Open Redirect vulnerability exists
prior to version 1.52.117,
- brave-browser <itp> (bug #864795)
CVE-2023-28363
RESERVED
-CVE-2023-28362
+CVE-2023-28362 [Possible XSS via User Supplied Values to redirect_to]
RESERVED
- - rails <unfixed>
+ - rails <unfixed> (bug #1051058)
NOTE:
https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
NOTE:
https://github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5
(main)
NOTE:
https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441
(v6.1.7.4)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bebbddbf4ae831bf4bcf0a100b3e32acac0a384
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bebbddbf4ae831bf4bcf0a100b3e32acac0a384
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
