[Secure-testing-commits] r57217 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-01 21:28:45 +0000 (Wed, 01 Nov 2017)
New Revision: 57217

Modified:
   data/CVE/list
Log:
Add source package for CVE-2017-1001001, keep TODO

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-01 21:20:20 UTC (rev 57216)
+++ data/CVE/list	2017-11-01 21:28:45 UTC (rev 57217)
@@ -319,6 +319,8 @@
 	NOTE: http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=7292230dd185
 	NOTE: https://blogs.securiteam.com/index.php/archives/3494
 CVE-2017-1001001 (PluXml version 5.6 is vulnerable to stored cross-site scripting ...)
+	- pluxml <unfixed>
+	NOTE: https://github.com/pluxml/PluXml/issues/253
 	TODO: check
 CVE-2017-1000244 (Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF ...)
 	TODO: check