Antoine Beaupré pushed to branch master at Debian Security Tracker / security-tracker
Commits: 0a904f21 by Antoine Beaupré at 2018-02-16T11:25:55-05:00 add details on CVE-2018-7176 - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -6,8 +6,10 @@ CVE-2018-7178 RESERVED CVE-2018-7177 RESERVED -CVE-2018-7176 (FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a ...) - - frontaccounting <removed> +CVE-2018-7176 (FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php...) + - frontaccounting <removed> (bug #890604) + NOTE: https://securitywarrior9.blogspot.ca/2018/02/cross-site-request-forgery-front.html + [wheezy] - frontaccounting <end-of-life> (unsupported in wheezy, already vulnerable to SQL injection in CVE-2014-3973) CVE-2018-7175 (An issue was discovered in xpdf 4.00. A NULL pointer dereference in ...) - xpdf <undetermined> NOTE: https://forum.xpdfreader.com/viewtopic.php?f=3&t=613 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0a904f215e8c93727dac3d43abbd83922a8803e9 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0a904f215e8c93727dac3d43abbd83922a8803e9 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits