[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2bb979d0 by Moritz Muehlenhoff at 2023-07-01T20:04:32+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2023-37252
+	NOT-FOR-US: MediaWiki extension CheckUser
+CVE-2023-37253
+	NOT-FOR-US: MediaWiki extension ProofreadPage
 CVE-2023-3493 (Improper Neutralization of Formula Elements in a CSV File in GitHub re ...)
 	NOT-FOR-US: fossbilling
 CVE-2023-3491 (Unrestricted Upload of File with Dangerous Type in GitHub repository f ...)
@@ -109,15 +113,15 @@ CVE-2023-37307 (In MISP before 2.4.172, title_for_layout is not properly sanitiz
 CVE-2023-37306 (MISP 2.4.172 mishandles different certificate file extensions in serve ...)
 	TODO: check
 CVE-2023-37305 (An issue was discovered in the ProofreadPage (aka Proofread Page) exte ...)
-	TODO: check
+	NOT-FOR-US: MediaWiki extension ProofreadPage
 CVE-2023-37304 (An issue was discovered in the DoubleWiki extension for MediaWiki thro ...)
-	TODO: check
+	NOT-FOR-US: MediaWiki extension DoubleWiki
 CVE-2023-37303 (An issue was discovered in the CheckUser extension for MediaWiki throu ...)
-	TODO: check
+	NOT-FOR-US: MediaWiki extension CheckUser
 CVE-2023-37302 (An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki  ...)
-	TODO: check
+	NOT-FOR-US: MediaWiki extension WikiBase
 CVE-2023-37301 (An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki ...)
-	TODO: check
+	NOT-FOR-US: MediaWiki extension WikiBase
 CVE-2023-37300 (An issue was discovered in the CheckUserLog API in the CheckUser exten ...)
 	TODO: check
 CVE-2023-37299 (Joplin before 2.11.5 allows XSS via an AREA element of an image map.)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bb979d0b88317871ab147a1268d1c698e3a7e2c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bb979d0b88317871ab147a1268d1c698e3a7e2c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230701/a1390f70/attachment-0001.htm>