[Git][security-tracker-team/security-tracker][master] Process NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a635a476 by Salvatore Bonaccorso at 2022-02-08T21:19:11+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -517,7 +517,7 @@ CVE-2022-24452
 CVE-2022-24451
 	RESERVED
 CVE-2022-24450 (NATS nats-server before 2.7.2 has Incorrect Access Control. Any authen ...)
-	TODO: check
+	NOT-FOR-US: nats-server
 CVE-2022-24449
 	RESERVED
 CVE-2022-24448 (An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.1 ...)
@@ -594,19 +594,19 @@ CVE-2022-0511
 	- firefox <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2022-04/#CVE-2022-0511
 CVE-2022-0510 (Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore pr ...)
-	TODO: check
+	NOT-FOR-US: pimcore
 CVE-2022-0509 (Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior ...)
-	TODO: check
+	NOT-FOR-US: pimcore
 CVE-2022-0508 (Server-Side Request Forgery (SSRF) in NPM @peertube/embed-api prior to ...)
 	TODO: check
 CVE-2022-0507
 	RESERVED
 CVE-2022-0506 (Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber ...)
-	TODO: check
+	NOT-FOR-US: microweber
 CVE-2022-0505 (Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber p ...)
-	TODO: check
+	NOT-FOR-US: microweber
 CVE-2022-0504 (Generation of Error Message Containing Sensitive Information in Packag ...)
-	TODO: check
+	NOT-FOR-US: microweber
 CVE-2022-0503
 	RESERVED
 CVE-2022-0502 (Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a635a476d55b47751c9068297c12e225e481da43

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a635a476d55b47751c9068297c12e225e481da43
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220208/8577bb6d/attachment.htm>