[Git][security-tracker-team/security-tracker][master] Mark CVE-2022-23395 as unimportant

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
27a48558 by Salvatore Bonaccorso at 2022-03-16T21:11:45+01:00
Mark CVE-2022-23395 as unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11277,10 +11277,11 @@ CVE-2022-23397 (The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a c
 CVE-2022-23396
 	RESERVED
 CVE-2022-23395 (jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead ...)
-	- jquery-goodies <undetermined>
+	- jquery-goodies <unfixed> (unimportant)
 	NOTE: https://github.com/advisories/GHSA-gcx5-3p5f-f8vp
 	NOTE: https://security.snyk.io/vuln/SNYK-UBUNTU1804-CHROMIUMBROWSER-2415268
 	NOTE: https://github.com/js-cookie/js-cookie/issues/766
+	NOTE: Sanitizing should be dealt with at the application level.
 CVE-2022-23394
 	RESERVED
 CVE-2022-23393



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27a48558c08e1b2096f64abba82406f6b340f1ea

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/27a48558c08e1b2096f64abba82406f6b340f1ea
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220316/319ba011/attachment.htm>