[Secure-testing-commits] r38774 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jan 8 12:43:43 UTC 2016


Author: carnil
Date: 2016-01-08 12:43:43 +0000 (Fri, 08 Jan 2016)
New Revision: 38774

Modified:
   data/CVE/list
Log:
Add reference to changeset and poc for wordpress issue, thanks kpcyrd and jvoisin

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-08 12:26:56 UTC (rev 38773)
+++ data/CVE/list	2016-01-08 12:43:43 UTC (rev 38774)
@@ -7,6 +7,8 @@
 CVE-2016-XXXX [cross-site scripting vulnerability]
 	- wordpress 4.4.1+dfsg-1 (bug #810325)
 	NOTE: https://wordpress.org/news/2016/01/wordpress-4-4-1-security-and-maintenance-release/
+	NOTE: https://core.trac.wordpress.org/changeset/36185
+	NOTE: https://wpvulndb.com/vulnerabilities/8358
 	TODO: check
 CVE-2015-XXXX [use after free / double free]
 	- lighttpd 1.4.39-1




More information about the Secure-testing-commits mailing list