[Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Jun 14 11:31:41 BST 2023
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d9228418 by Moritz Muehlenhoff at 2023-06-14T12:31:14+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15,13 +15,13 @@ CVE-2023-3232 (A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and cla
CVE-2023-3231 (A vulnerability has been found in UJCMS up to 6.0.2 and classified as ...)
NOT-FOR-US: UJCMS
CVE-2023-3230 (Missing Authorization in GitHub repository fossbilling/fossbilling pri ...)
- TODO: check
+ NOT-FOR-US: fossbilling
CVE-2023-3229 (Business Logic Errors in GitHub repository fossbilling/fossbilling pri ...)
- TODO: check
+ NOT-FOR-US: fossbilling
CVE-2023-3228 (Business Logic Errors in GitHub repository fossbilling/fossbilling pri ...)
- TODO: check
+ NOT-FOR-US: fossbilling
CVE-2023-3227 (Insufficient Granularity of Access Control in GitHub repository fossbi ...)
- TODO: check
+ NOT-FOR-US: fossbilling
CVE-2023-3203 (The MStore API plugin for WordPress is vulnerable to Cross-Site Reques ...)
NOT-FOR-US: MStore API plugin for WordPress
CVE-2023-3201 (The MStore API plugin for WordPress is vulnerable to Cross-Site Reques ...)
@@ -40,11 +40,11 @@ CVE-2023-34537 (A Reflected XSS was discovered in HotelDruid version 3.0.5, an a
- hoteldruid <unfixed>
NOTE: https://github.com/leekenghwa/CVE-2023-34537---XSS-reflected--found-in-HotelDruid-3.0.5
CVE-2023-34396 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
- TODO: check
+ - libstruts1.2-java <removed>
CVE-2023-34250 (Discourse is an open source discussion platform. Prior to version 3.0. ...)
NOT-FOR-US: Discourse
CVE-2023-34149 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
- TODO: check
+ - libstruts1.2-java <removed>
CVE-2023-34000 (Unauth. IDOR vulnerability leading to PII Disclosure inWooCommerce Str ...)
NOT-FOR-US: WordPress plugin
CVE-2023-33933 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d92284184ada4928c8df5392aef9f6068f9c8855
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d92284184ada4928c8df5392aef9f6068f9c8855
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230614/fbf83955/attachment.htm>
More information about the debian-security-tracker-commits
mailing list