[Git][security-tracker-team/security-tracker][master] Seems it is not reproducible with PoC https://labs.bishopfox.com/advisories/tinymce-version-5.2.1

[Abhijith PA]

Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7e441e86 by Abhijith PA at 2020-10-20T22:57:34+05:30
Seems it is not reproducible with PoC https://labs.bishopfox.com/advisories/tinymce-version-5.2.1
Marked as not-affected fot stretch

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32416,6 +32416,7 @@ CVE-2020-12649 (Gurbalib through 2020-04-30 allows lib/cmds/player/help.c direct
 CVE-2020-12648 (A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlie ...)
 	- tinymce <unfixed>
 	[buster] - tinymce <no-dsa> (Minor issue)
+	[stretch] - tinymce <not-affected> (Vulnerable code not present and not reproducible)
 	NOTE: https://labs.bishopfox.com/advisories/tinymce-version-5.2.1
 CVE-2020-12647 (Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 6 ...)
 	NOT-FOR-US: Unisys ALGOL Compiler



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e441e8685819e967648059f620b871014a09929

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7e441e8685819e967648059f620b871014a09929
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201020/d2ec8f90/attachment-0001.html>