Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0dd32f9e by Salvatore Bonaccorso at 2019-11-05T20:20:23Z
Add CVE-2019-17221/phantomjs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6964,7 +6964,8 @@ CVE-2019-17223 (There is HTML Injection in the Note field
in Dolibarr ERP/CRM 10
CVE-2019-17222
RESERVED
CVE-2019-17221 (PhantomJS through 2.1.1 has an arbitrary file read
vulnerability, as d ...)
- TODO: check
+ - phantomjs <unfixed>
+ NOTE:
https://www.darkmatter.ae/blogs/breaching-the-perimeter-phantomjs-arbitrary-file-read/
CVE-2019-17220 (Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title]
line. ...)
NOT-FOR-US: Rocket.Chat
CVE-2019-17219 (An issue was discovered on V-Zug Combi-Steam MSLQ devices
before Ether ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0dd32f9edb961f1b1d52debb895f89198a1d1aac
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0dd32f9edb961f1b1d52debb895f89198a1d1aac
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
