Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a5307dca by Salvatore Bonaccorso at 2023-09-06T21:48:52+02:00
Add CVE-2023-4540/lua-http
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -281,7 +281,8 @@ CVE-2023-4613 (This vulnerability allows remote attackers
to execute arbitrary c
CVE-2023-4587 (An IDOR vulnerability has been found in ZKTeco ZEM800 product
affectin ...)
NOT-FOR-US: ZKTeco ZEM800 product
CVE-2023-4540 (Improper Handling of Exceptional Conditions vulnerability in
Daurnimat ...)
- TODO: check
+ - lua-http <unfixed>
+ NOTE: Fixed by:
https://github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680ca8d3cbde55e0bae6
CVE-2023-4298 (The 123.chat WordPress plugin before 1.3.1 does not sanitise
and escap ...)
NOT-FOR-US: WordPress plugin
CVE-2023-4284 (The Post Timeline WordPress plugin before 2.2.6 does not
sanitise and ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5307dca76a7a8e244a57840c7218ed75fa159ff
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5307dca76a7a8e244a57840c7218ed75fa159ff
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
