[Secure-testing-commits] r49613 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Mar 12 16:25:37 UTC 2017


Author: carnil
Date: 2017-03-12 16:25:37 +0000 (Sun, 12 Mar 2017)
New Revision: 49613

Modified:
   data/CVE/list
Log:
Update CVE-2017-6819/wordpress

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-12 16:25:27 UTC (rev 49612)
+++ data/CVE/list	2017-03-12 16:25:37 UTC (rev 49613)
@@ -14,8 +14,6 @@
 	RESERVED
 CVE-2017-6821
 	RESERVED
-CVE-2017-6819 (In WordPress before 4.7.3, there is cross-site request forgery (CSRF) ...)
-	TODO: check
 CVE-2017-6820 [XSS issue in handling of a style tag inside of an svg element]
 	- roundcube <unfixed> (bug #857473)
 	NOTE: https://github.com/roundcube/roundcubemail/commit/fa2824fdcd44af3f970b2797feb47652482c8305
@@ -672,7 +670,7 @@
 	[wheezy] - wordpress <not-affected> (Only affects 4.7.x)
 	NOTE: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
 	NOTE: https://github.com/WordPress/WordPress/commit/9092fd01e1f452f37c313d38b18f9fe6907541f9
-CVE-2017-XXXX [Cross-site request forgery (CSRF) in Press This leading to excessive use of server resources]
+CVE-2017-6819 [Cross-site request forgery (CSRF) in Press This leading to excessive use of server resources]
 	- wordpress 4.7.3+dfsg-1 (bug #857026)
 	[jessie] - wordpress <not-affected> (Only affects 4.2 and later)
 	[wheezy] - wordpress <not-affected> (Only affects 4.2 and later)




More information about the Secure-testing-commits mailing list