Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: d5151931 by Moritz Muehlenhoff at 2024-03-31T13:58:29+02:00 new mediawiki issues - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,15 @@ +CVE-2024-XXXX [mediawiki: XSS in edit summary parser] + - mediawiki 1:1.39.7-1 + [bullseye] - mediawiki <not-affected> (Vulnerable code not present, introduced in 1.38) + [buster] - mediawiki <not-affected> (Vulnerable code not present, introduced in 1.38) + NOTE: https://lists.wikimedia.org/hyperkitty/list/[email protected]/thread/V3WXEPXV2DU6WTVEKK4XHW4QXD5OFKD7/ + NOTE: https://phabricator.wikimedia.org/T355538 + NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1015422 +CVE-2024-XXXX [mediawiki: Denial of service vector via GET request to Special:MovePage on pages with thousands of subpages] + - mediawiki 1:1.39.7-1 + NOTE: https://lists.wikimedia.org/hyperkitty/list/[email protected]/thread/V3WXEPXV2DU6WTVEKK4XHW4QXD5OFKD7/ + NOTE: https://phabricator.wikimedia.org/T357760 + NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1015423 CVE-2024-3118 (A vulnerability, which was classified as critical, has been found in D ...) NOT-FOR-US: Dreamer CMS CVE-2024-3117 (A vulnerability classified as critical was found in YouDianCMS up to 9 ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5151931d2695aafca6ddfbb7040f5c6009698df -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5151931d2695aafca6ddfbb7040f5c6009698df You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
