[Git][security-tracker-team/security-tracker][master] Process some Drupal core issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5b5aefce by Salvatore Bonaccorso at 2023-04-26T22:36:57+02:00
Process some Drupal core issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -37,7 +37,8 @@ CVE-2023-31252
 CVE-2023-31251
 	RESERVED
 CVE-2023-31250 (The file download facility doesn't sufficiently sanitize file paths in ...)
-	TODO: check
+	- drupal7 <removed>
+	NOTE: https://www.drupal.org/sa-core-2023-005
 CVE-2023-31238
 	RESERVED
 CVE-2023-31237
@@ -95761,17 +95762,23 @@ CVE-2022-25280
 CVE-2022-25279
 	RESERVED
 CVE-2022-25278 (Under certain circumstances, the Drupal core form API evaluates form e ...)
-	TODO: check
+	- drupal7 <not-affected> (Only affects Drupal 8 and 9)
+	NOTE: https://www.drupal.org/sa-core-2022-013
 CVE-2022-25277 (Drupal core sanitizes filenames with dangerous extensions upon upload  ...)
-	TODO: check
+	- drupal7 <not-affected> (Only affects Drupal 8 and 9)
+	NOTE: https://www.drupal.org/sa-core-2022-014
 CVE-2022-25276 (The Media oEmbed iframe route does not properly validate the iframe do ...)
-	TODO: check
+	- drupal7 <not-affected> (Only affects Drupal 8 and 9)
+	NOTE: https://www.drupal.org/sa-core-2022-015
 CVE-2022-25275 (In some situations, the Image module does not correctly check access t ...)
-	TODO: check
+	- drupal7 <removed>
+	NOTE: https://www.drupal.org/sa-core-2022-012
 CVE-2022-25274 (Drupal 9.3 implemented a generic entity access API for entity revision ...)
-	TODO: check
+	- drupal7 <not-affected> (Only affects Drupal 9)
+	NOTE: https://www.drupal.org/sa-core-2022-009
 CVE-2022-25273 (Drupal core's form API has a vulnerability where certain contributed o ...)
-	TODO: check
+	- drupal7 <not-affected> (Only affects Drupal 8 and 9)
+	NOTE: https://www.drupal.org/sa-core-2022-008
 CVE-2022-25272
 	RESERVED
 CVE-2022-25270 (The Quick Edit module does not properly check entity access in some ci ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b5aefce66bb7bd1d0751ea859735ea75ce2ed3b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b5aefce66bb7bd1d0751ea859735ea75ce2ed3b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230426/34e7dcaf/attachment.htm>