[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14912/cgit

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d48d313c by Salvatore Bonaccorso at 2018-08-03T20:14:21Z
Add CVE-2018-14912/cgit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3,7 +3,10 @@ CVE-2018-14914
 CVE-2018-14913
 	RESERVED
 CVE-2018-14912 (cgit_clone_objects in CGit before 1.2.1 has a directory traversal ...)
-	TODO: check
+	- cgit <unfixed>
+	NOTE: https://bugs.chromium.org/p/project-zero/issues/detail?id=1627
+	NOTE: https://lists.zx2c4.com/pipermail/cgit/2018-August/004176.html
+	NOTE: https://git.zx2c4.com/cgit/commit/?id=53efaf30b50f095cad8c160488c74bba3e3b2680
 CVE-2018-14911 (A file upload vulnerability exists in ukcms v1.1.7 and earlier. The ...)
 	TODO: check
 CVE-2018-14910 (SeaCMS v6.61 allows Remote Code execution by placing PHP code in an ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d48d313c0e104446d3137e268479904e41cf188f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d48d313c0e104446d3137e268479904e41cf188f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180803/cd336e8b/attachment.html>