[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-1000509/dolibarr

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9cbb5408 by Salvatore Bonaccorso at 2018-02-10T10:44:40+01:00
Add CVE-2017-1000509/dolibarr

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1504,7 +1504,8 @@ CVE-2018-1000019 (OpenEMR version 5.0.0 contains a OS Command Injection vulnerab
 CVE-2017-1000510 (Croogo version 2.3.1-17-g6f82e6c contains a Cross Site Scripting (XSS) ...)
 	TODO: check
 CVE-2017-1000509 (Dolibarr version 6.0.2 contains a Cross Site Scripting (XSS) ...)
-	TODO: check
+	- dolibarr <unfixed>
+	NOTE: https://github.com/Dolibarr/dolibarr/issues/7727
 CVE-2017-1000508 (Invoice Plane version 1.5.4 and earlier contains a Cross Site ...)
 	TODO: check
 CVE-2017-1000507 (Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9cbb5408bd0823c8127be729294fc20df03e5690

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9cbb5408bd0823c8127be729294fc20df03e5690
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180210/ece9ff89/attachment-0001.html>