[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a457cddf by Salvatore Bonaccorso at 2022-04-05T10:39:33+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8019,7 +8019,7 @@ CVE-2022-25620 (Improper Neutralization of Script-Related HTML Tags in a Web Pag
 CVE-2022-25619 (Improper Neutralization of Special Elements used in a Command ('Comman ...)
 	NOT-FOR-US: Profelis IT Consultancy SambaBox
 CVE-2022-25618 (Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-25617
 	RESERVED
 CVE-2022-25616
@@ -8029,7 +8029,7 @@ CVE-2022-25615
 CVE-2022-25614
 	RESERVED
 CVE-2022-25613 (Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in F ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2022-25612 (Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-25611 (Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planne ...)
@@ -47708,7 +47708,7 @@ CVE-2021-36853
 CVE-2021-36852
 	RESERVED
 CVE-2021-36851 (Authenticated (editor or higher user role) Cross-Site Scripting (XSS)  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2021-36850 (Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media Fil ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2021-36849
@@ -47758,7 +47758,7 @@ CVE-2021-36828
 CVE-2021-36827
 	RESERVED
 CVE-2021-36826 (Authenticated (subscriber or higher user role if allowed to access pro ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2021-36825
 	RESERVED
 CVE-2021-36824



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a457cddf5c6f137282980532fd480fb37dacb0e7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a457cddf5c6f137282980532fd480fb37dacb0e7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220405/4345c8c6/attachment.htm>