[Git][security-tracker-team/security-tracker][master] Add CVE-2018-11652/nikto

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
14e4609d by Salvatore Bonaccorso at 2018-06-01T23:56:02+02:00
Add CVE-2018-11652/nikto

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -41,7 +41,10 @@ CVE-2018-11654
 CVE-2018-11653
 	RESERVED
 CVE-2018-11652 (CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote ...)
-	TODO: check
+	- nikto <unfixed>
+	[stretch] - nikto <no-dsa> (non-free not supported)
+	[jessie] - nikto <no-dsa> (non-free not supported)
+	NOTE: https://github.com/sullo/nikto/commit/e759b3300aace5314fe3d30800c8bd83c81c29f7
 CVE-2018-11651 (Graylog before v2.4.4 has an XSS security issue with unescaped text in ...)
 	TODO: check
 CVE-2018-11650 (Graylog before v2.4.4 has an XSS security issue with unescaped text in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/14e4609df52e58e7141dc74388660867bc8a2df2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/14e4609df52e58e7141dc74388660867bc8a2df2
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180601/ae007317/attachment.html>