[Git][security-tracker-team/security-tracker][master] Add new glpi issues
Salvatore Bonaccorso
carnil at debian.org
Thu May 7 21:40:17 BST 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
3d8ae600 by Salvatore Bonaccorso at 2020-05-07T22:39:59+02:00
Add new glpi issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5016,15 +5016,25 @@ CVE-2020-11038
CVE-2020-11037 (In Wagtail before versions 2.7.2 and 2.8.2, a potential timing attack ...)
NOT-FOR-US: Wagtail
CVE-2020-11036 (In GLPI before version 9.4.6 there are multiple related stored XSS vul ...)
- TODO: check
+ - glpi <removed> (unimportant)
+ NOTE: https://github.com/glpi-project/glpi/security/advisories/GHSA-3g3h-rwhr-7385
+ NOTE: Only supported behind an authenticated HTTP zone
CVE-2020-11035 (In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens ...)
- TODO: check
+ - glpi <removed> (unimportant)
+ NOTE: https://github.com/glpi-project/glpi/security/advisories/GHSA-w7q8-58qp-vmpf
+ NOTE: Only supported behind an authenticated HTTP zone
CVE-2020-11034 (In GLPI before version 9.4.6, there is a vulnerability that allows byp ...)
- TODO: check
+ - glpi <removed> (unimportant)
+ NOTE: https://github.com/glpi-project/glpi/security/advisories/GHSA-gxv6-xq9q-37hg
+ NOTE: Only supported behind an authenticated HTTP zone
CVE-2020-11033 (In GLPI from version 9.1 and before version 9.4.6, any API user with R ...)
- TODO: check
+ - glpi <removed> (unimportant)
+ NOTE: https://github.com/glpi-project/glpi/security/advisories/GHSA-rf54-3r4w-4h55
+ NOTE: Only supported behind an authenticated HTTP zone
CVE-2020-11032 (In GLPI before version 9.4.6, there is a SQL injection vulnerability f ...)
- TODO: check
+ - glpi <removed> (unimportant)
+ NOTE: https://github.com/glpi-project/glpi/security/advisories/GHSA-344w-34h9-wwhh
+ NOTE: Only supported behind an authenticated HTTP zone
CVE-2020-11031
RESERVED
CVE-2020-11030 (In affected versions of WordPress, a special payload can be crafted th ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d8ae600e9af2c7dd8abe879052ac5cad273889c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d8ae600e9af2c7dd8abe879052ac5cad273889c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200507/9183f030/attachment.html>
More information about the debian-security-tracker-commits
mailing list