[Git][security-tracker-team/security-tracker][master] Associate CVE-2023-2798 for htmlunit

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f3688456 by Salvatore Bonaccorso at 2023-12-31T16:18:58+01:00
Associate CVE-2023-2798 for htmlunit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32972,7 +32972,10 @@ CVE-2023-2881 (Storing Passwords in a Recoverable Format in GitHub repository pi
 CVE-2023-2851 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: AGT Tech Ceppatron
 CVE-2023-2798 (Those using HtmlUnit to browse untrusted webpages may be vulnerable to ...)
-	NOT-FOR-US: HtmlUnit
+	- jenkins-htmlunit-core-js <removed>
+	- htmlunit <removed>
+	NOTE: Fixed by: https://github.com/HtmlUnit/htmlunit/commit/940dc7fd8af9f46ca448c1e548b8f6d064a64290 (2.70.0)
+	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54613
 CVE-2023-2734 (The MStore API plugin for WordPress is vulnerable to authentication by ...)
 	NOT-FOR-US: MStore API plugin for WordPress
 CVE-2023-2733 (The MStore API plugin for WordPress is vulnerable to authentication by ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f36884562d6b53e899cb43cccb7dbd78591feb86

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f36884562d6b53e899cb43cccb7dbd78591feb86
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231231/421ab93b/attachment.htm>