[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14028/wordpress

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
82ac3475 by Salvatore Bonaccorso at 2018-08-11T12:15:34Z
Add CVE-2018-14028/wordpress

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3142,7 +3142,9 @@ CVE-2018-14030
 CVE-2018-14029 (CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 ...)
 	NOT-FOR-US: Creatiwity wityCMS
 CVE-2018-14028 (In WordPress 4.9.7, plugins uploaded via the admin area are not ...)
-	TODO: check
+	- wordpress <unfixed>
+	NOTE: https://core.trac.wordpress.org/ticket/44710
+	NOTE: https://rastating.github.io/unrestricted-file-upload-via-plugin-uploader-in-wordpress/
 CVE-2018-14027
 	RESERVED
 CVE-2018-14026



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/82ac34753aa1394d9dc67090ad1c84db022e4f2a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/82ac34753aa1394d9dc67090ad1c84db022e4f2a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180811/5e9d1444/attachment.html>