[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6f9c9ad4 by Salvatore Bonaccorso at 2022-03-22T22:06:05+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -966,7 +966,7 @@ CVE-2022-1001
 CVE-2022-1000 (Path Traversal in GitHub repository prasathmani/tinyfilemanager prior  ...)
 	TODO: check
 CVE-2022-27228 (In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site ...)
-	TODO: check
+	NOT-FOR-US: Bitrix Site Manager
 CVE-2022-27227
 	RESERVED
 CVE-2022-27226 (A CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16  ...)
@@ -3517,7 +3517,7 @@ CVE-2022-26287
 CVE-2022-26286
 	RESERVED
 CVE-2022-26285 (Simple Subscription Website v1.0 was discovered to contain a SQL injec ...)
-	TODO: check
+	NOT-FOR-US: Simple Subscription Website
 CVE-2022-26284 (Simple Client Management System v1.0 was discovered to contain a SQL i ...)
 	NOT-FOR-US: Simple Client Management System
 CVE-2022-26283 (Simple Subscription Website v1.0 was discovered to contain a SQL injec ...)
@@ -3567,7 +3567,7 @@ CVE-2022-26262
 CVE-2022-26261
 	RESERVED
 CVE-2022-26260 (Simple-Plist v1.3.0 was discovered to contain a prototype pollution vu ...)
-	TODO: check
+	NOT-FOR-US: Simple-Plist
 CVE-2022-26259
 	RESERVED
 CVE-2022-26258
@@ -4471,7 +4471,7 @@ CVE-2022-25764
 CVE-2022-25761
 	RESERVED
 CVE-2022-25760 (All versions of package accesslog are vulnerable to Arbitrary Code Inj ...)
-	TODO: check
+	NOT-FOR-US: accesslog Nodejs module
 CVE-2022-25759
 	RESERVED
 CVE-2022-25758



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f9c9ad4774eacf7d412436d58f4a1a4eba4870c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f9c9ad4774eacf7d412436d58f4a1a4eba4870c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220322/baac5c0e/attachment.htm>