[Git][security-tracker-team/security-tracker][master] Add CVE-2020-14424/cacti

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1e5b9caa by Salvatore Bonaccorso at 2021-11-15T09:42:17+01:00
Add CVE-2020-14424/cacti

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -103174,7 +103174,9 @@ CVE-2020-14426 (Certain NETGEAR devices are affected by disclosure of administra
 CVE-2020-14425 (Foxit Reader before 10.0 allows Remote Command Execution via the app.o ...)
 	NOT-FOR-US: Foxit Reader
 CVE-2020-14424 (Cacti before 1.2.18 allows remote attackers to trigger XSS via templat ...)
-	TODO: check
+	- cacti <unfixed>
+	NOTE: https://github.com/Cacti/cacti/pull/4261
+	NOTE: https://github.com/Cacti/cacti/commit/d12800ab479ad95a091bc577f28fd99ec95eb64c (release/1.2.18)
 CVE-2020-14423 (Convos before 4.20 does not properly generate a random secret in Core/ ...)
 	NOT-FOR-US: Convos
 CVE-2020-14422 (Lib/ipaddress.py in Python through 3.8.3 improperly computes hash valu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1e5b9caa4c1a48bf8785b91c1739776570ed8d78

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1e5b9caa4c1a48bf8785b91c1739776570ed8d78
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211115/d65b92b3/attachment.htm>