Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f3688456 by Salvatore Bonaccorso at 2023-12-31T16:18:58+01:00
Associate CVE-2023-2798 for htmlunit
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -32972,7 +32972,10 @@ CVE-2023-2881 (Storing Passwords in a Recoverable
Format in GitHub repository pi
CVE-2023-2851 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
NOT-FOR-US: AGT Tech Ceppatron
CVE-2023-2798 (Those using HtmlUnit to browse untrusted webpages may be
vulnerable to ...)
- NOT-FOR-US: HtmlUnit
+ - jenkins-htmlunit-core-js <removed>
+ - htmlunit <removed>
+ NOTE: Fixed by:
https://github.com/HtmlUnit/htmlunit/commit/940dc7fd8af9f46ca448c1e548b8f6d064a64290
(2.70.0)
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54613
CVE-2023-2734 (The MStore API plugin for WordPress is vulnerable to
authentication by ...)
NOT-FOR-US: MStore API plugin for WordPress
CVE-2023-2733 (The MStore API plugin for WordPress is vulnerable to
authentication by ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f36884562d6b53e899cb43cccb7dbd78591feb86
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f36884562d6b53e899cb43cccb7dbd78591feb86
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
