[Git][security-tracker-team/security-tracker][master] Update metadata for CVE-2023-28362

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cb65060c by Salvatore Bonaccorso at 2023-07-16T22:34:37+02:00
Update metadata for CVE-2023-28362

Directly reference now to upstream announce and add the identifying
upstream tag to the updstream commit in the 6.1-series.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17116,9 +17116,9 @@ CVE-2023-28363
 CVE-2023-28362
 	RESERVED
 	- rails <unfixed>
-	NOTE: https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-28362.yml
+	NOTE: https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
 	NOTE: https://github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5 (main)
-	NOTE: https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441 (6.1-stable)
+	NOTE: https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441 (v6.1.7.4)
 CVE-2023-28361 (A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi  ...)
 	NOT-FOR-US: UniFi OS
 CVE-2023-28360 (An omission of security-relevant information vulnerability exists in B ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb65060c0b5d8db69a35f1928282a69cdcd8b7e0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb65060c0b5d8db69a35f1928282a69cdcd8b7e0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230716/9bef7ecf/attachment.htm>