Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3242f79c by Salvatore Bonaccorso at 2023-10-05T06:42:48+02:00
Add reference to CVE-2023-37543/cacti
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7606,6 +7606,7 @@ CVE-2023-37543 (Cacti before 1.2.6 allows IDOR (Insecure
Direct Object Reference
[buster] - cacti <no-dsa> (Minor issue)
NOTE:
https://github.com/Cacti/cacti/security/advisories/GHSA-4x82-8w8m-w8hj
NOTE:
https://medium.com/%40hussainfathy99/exciting-news-my-first-cve-discovery-cve-2023-37543-idor-vulnerability-in-cacti-bbb6c386afed
+ NOTE: https://github.com/Cacti/cacti/issues/5523
TODO: check details once GHSA-4x82-8w8m-w8hj accessible, 1.2.6 does not
seem correct, reporter claims 1.2.25 wich is not released
CVE-2023-37388 (Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability
in Sudi ...)
NOT-FOR-US: WordPress plugin
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3242f79c811d9bb22f3e7dfc15c0f2d5d2af3d9a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3242f79c811d9bb22f3e7dfc15c0f2d5d2af3d9a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
