[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2021-43008/adminer 4.6.3-1

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a744ec94 by Neil Williams at 2022-04-06T09:07:12+01:00
CVE-2021-43008/adminer 4.6.3-1

- - - - -
c17f96d9 by Neil Williams at 2022-04-06T09:15:24+01:00
Process an NFU

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29169,7 +29169,7 @@ CVE-2021-43456 (An Unquoted Service Path vulnerablility exists in Rumble Mail Se
 CVE-2021-43455 (An Unquoted Service Path vulnerability exists in FreeLAN 2.2 via a spe ...)
 	TODO: check
 CVE-2021-43454 (An Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.3 ...)
-	TODO: check
+	NOT-FOR-US: AnyTXT Searcher for Windows
 CVE-2021-43453
 	RESERVED
 CVE-2021-43452
@@ -31337,7 +31337,10 @@ CVE-2021-43010
 CVE-2021-43009
 	RESERVED
 CVE-2021-43008 (Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in  ...)
-	TODO: check
+	- adminer 4.6.3-1
+	NOTE: https://github.com/vrana/adminer/releases/tag/v4.6.3
+	NOTE: https://podalirius.net/en/cves/2021-43008/
+	NOTE: https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability
 CVE-2021-43007
 	RESERVED
 CVE-2021-43006 (AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOC ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/de034bd2d964cc1b3d65510f9a4bb11c590469a5...c17f96d976a8800a0469ffa7dd3994003dc5ea79

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/de034bd2d964cc1b3d65510f9a4bb11c590469a5...c17f96d976a8800a0469ffa7dd3994003dc5ea79
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220406/48d3f300/attachment.htm>