[Secure-testing-commits] r49607 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-03-12 16:19:17 +0000 (Sun, 12 Mar 2017)
New Revision: 49607

Modified:
   data/CVE/list
Log:
Update CVE-2017-6814/wordpress

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-12 16:15:39 UTC (rev 49606)
+++ data/CVE/list	2017-03-12 16:19:17 UTC (rev 49607)
@@ -24,8 +24,6 @@
 	TODO: check
 CVE-2017-6815 (In WordPress before 4.7.3 (wp-includes/pluggable.php), control ...)
 	TODO: check
-CVE-2017-6814 (In WordPress before 4.7.3, there is authenticated Cross-Site Scripting ...)
-	TODO: check
 CVE-2017-6820 [XSS issue in handling of a style tag inside of an svg element]
 	- roundcube <unfixed> (bug #857473)
 	NOTE: https://github.com/roundcube/roundcubemail/commit/fa2824fdcd44af3f970b2797feb47652482c8305
@@ -658,7 +656,7 @@
 	NOT-FOR-US: burgundy-cms
 CVE-2017-6507
 	RESERVED
-CVE-2017-XXXX [Cross-site scripting (XSS) via media file metadata]
+CVE-2017-6814 [Cross-site scripting (XSS) via media file metadata]
 	- wordpress 4.7.3+dfsg-1 (bug #857026)
 	NOTE: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
 	NOTE: https://github.com/WordPress/WordPress/commit/28f838ca3ee205b6f39cd2bf23eb4e5f52796bd7