[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dd68d563 by Salvatore Bonaccorso at 2023-07-12T21:58:25+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -74,7 +74,7 @@ CVE-2023-3158 (The Mail Control plugin for WordPress is vulnerable to Stored Cro
 CVE-2023-3135 (The Mailtree Log Mail plugin for WordPress is vulnerable to Stored Cro ...)
 	NOT-FOR-US: Mailtree Log Mail plugin for WordPress
 CVE-2023-3127 (An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iS ...)
-	TODO: check
+	NOT-FOR-US: iSTAR
 CVE-2023-3122 (The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-S ...)
 	NOT-FOR-US: GD Mail Queue plugin for WordPress
 CVE-2023-3105 (The LearnDash LMS plugin for WordPress is vulnerable to Insecure Direc ...)
@@ -104,15 +104,15 @@ CVE-2023-37766 (GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain
 CVE-2023-37765 (GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a seg ...)
 	TODO: check
 CVE-2023-37200 (A CWE-611: Improper Restriction of XML External Entity Reference vulne ...)
-	TODO: check
+	NOT-FOR-US: Schneider Electric
 CVE-2023-37199 (A CWE-94: Improper Control of Generation of Code ('Code Injection') vu ...)
-	TODO: check
+	NOT-FOR-US: Schneider Electric
 CVE-2023-37198 (A CWE-94: Improper Control of Generation of Code ('Code Injection') vu ...)
-	TODO: check
+	NOT-FOR-US: Schneider Electric
 CVE-2023-37197 (A CWE-89: Improper Neutralization of Special Elements vulnerability us ...)
-	TODO: check
+	NOT-FOR-US: Schneider Electric
 CVE-2023-37196 (A CWE-89: Improper Neutralization of Special Elements vulnerability us ...)
-	TODO: check
+	NOT-FOR-US: Schneider Electric
 CVE-2023-37174 (GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a seg ...)
 	TODO: check
 CVE-2023-32200 (There is insufficient restrictions of called script functions in Apach ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd68d5636c7af969310d6f8b45fd90c81fc04245

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd68d5636c7af969310d6f8b45fd90c81fc04245
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230712/a2d02362/attachment.htm>