[Git][security-tracker-team/security-tracker][master] Dump initial investigation observations of CVE-2020-10683 in dom4j.

[Chris Lamb]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9f99f383 by Chris Lamb at 2020-04-22T10:49:07+01:00
Dump initial investigation observations of CVE-2020-10683 in dom4j.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4504,7 +4504,8 @@ CVE-2020-10684 (A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x an
 CVE-2020-10683 [XML External Entity vulnerability in default SAX parser]
 	RESERVED
 	- dom4j <unfixed> (bug #958055)
-	NOTE: https://github.com/dom4j/dom4j/commit/a8228522a99a02146106672a34c104adbda5c658
+	NOTE: https://github.com/dom4j/dom4j/commit/1707bf3d898a8ada3b213acb0e3b38f16eaae73d (the fix?)
+	NOTE: https://github.com/dom4j/dom4j/commit/a8228522a99a02146106672a34c104adbda5c658 (post-fix refactor?)
 CVE-2020-10682 (The Filemanager in CMS Made Simple 2.2.13 allows remote code execution ...)
 	NOT-FOR-US: CMS Made Simple
 CVE-2020-10681 (The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd fi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9f99f383c86d96e33e155591732cbec8c93e4897

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9f99f383c86d96e33e155591732cbec8c93e4897
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200422/1268e0cf/attachment.html>