[Git][security-tracker-team/security-tracker][master] new rails issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b33468ac by Moritz Muehlenhoff at 2023-07-16T12:54:16+02:00
new rails issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17071,6 +17071,10 @@ CVE-2023-28363
 	RESERVED
 CVE-2023-28362
 	RESERVED
+	- rails <unfixed>
+	NOTE: https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-28362.yml
+	NOTE: https://github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5 (main)
+	NOTE: https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441 (6.1-stable)
 CVE-2023-28361 (A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi  ...)
 	NOT-FOR-US: UniFi OS
 CVE-2023-28360 (An omission of security-relevant information vulnerability exists in B ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b33468ac8dc2219135862502c5e0336efa048804

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b33468ac8dc2219135862502c5e0336efa048804
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230716/a4e6e7e3/attachment.htm>