[Git][security-tracker-team/security-tracker][master] CVE-2023-51448/cacti: reference introductory commit / previous CVE fix

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
700ff44c by Sylvain Beucler at 2023-12-23T10:25:02+01:00
CVE-2023-51448/cacti: reference introductory commit / previous CVE fix

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -50,7 +50,9 @@ CVE-2023-51649 (Nautobot is a Network Source of Truth and Network Automation Pla
 	NOT-FOR-US: Nautobot
 CVE-2023-51448 (Cacti provides an operational monitoring and fault management framewor ...)
 	- cacti <unfixed>
+	[buster] - cacti <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/Cacti/cacti/security/advisories/GHSA-w85f-7c4w-7594
+	NOTE: Introduced by: https://github.com/Cacti/cacti/commit/7b1ae5bcab3caca020da0080e19ac51c2743adfe (release/1.2.25, CVE-2023-30534)
 CVE-2023-51035 (TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary com ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2023-51034 (TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary com ...)
@@ -36408,6 +36410,7 @@ CVE-2023-30534 (Cacti is an open source operational monitoring and fault managem
 	NOTE: https://github.com/Cacti/cacti/commit/6d22e0623dfbc5d687d8f61e683173d0d625f3a7 (release/1.2.25)
 	NOTE: https://github.com/Cacti/cacti/commit/7b1ae5bcab3caca020da0080e19ac51c2743adfe (release/1.2.25)
 	NOTE: https://github.com/Cacti/cacti/commit/35d76a87d10ffeec483c768663013746624cecbf (release/1.2.25)
+	NOTE: Be careful. Introduces CVE-2023-51448.
 CVE-2023-30533 (SheetJS Community Edition before 0.19.3 allows Prototype Pollution via ...)
 	NOT-FOR-US: SheetJS
 CVE-2023-2011



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/700ff44c5c12cbb4024757854242d4e86b400bb3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/700ff44c5c12cbb4024757854242d4e86b400bb3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231223/dc06b9e5/attachment.htm>