[Git][security-tracker-team/security-tracker][master] Add CVE-2019-13345/squid

Salvatore Bonaccorso carnil at debian.org
Fri Jul 5 21:31:10 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a00a3678 by Salvatore Bonaccorso at 2019-07-05T20:30:39Z
Add CVE-2019-13345/squid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,7 +9,10 @@ CVE-2019-13347
 CVE-2019-13346
 	RESERVED
 CVE-2019-13345 (The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_ ...)
-	TODO: check
+	- squid <unfixed>
+	- squid3 <removed>
+	NOTE: https://bugs.squid-cache.org/show_bug.cgi?id=4957
+	NOTE: https://github.com/squid-cache/squid/pull/429
 CVE-2019-13344 (An authentication bypass vulnerability in the CRUDLab WP Like Button p ...)
 	TODO: check
 CVE-2019-13343



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a00a36783ca9877c4b0d4db52c4c50c1ea008b69

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a00a36783ca9877c4b0d4db52c4c50c1ea008b69
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190705/779d0372/attachment.html>


More information about the debian-security-tracker-commits mailing list