[Git][security-tracker-team/security-tracker][master] CVE-2023-47272 assigned for roundcube issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5c24dd72 by Salvatore Bonaccorso at 2023-11-06T08:12:41+01:00
CVE-2023-47272 assigned for roundcube issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,7 +23,7 @@ CVE-2023-46380 (LOYTEC LINX-212 firmware 6.2.4 and LVIS-3ME12-A1 firmware 6.2.2
 	NOT-FOR-US: LOYTEC electronics GmbH
 CVE-2023-40922 (kerawen before v2.5.1 was discovered to contain a SQL injection vulner ...)
 	NOT-FOR-US: kerawen
-CVE-2023-XXXX [cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download]
+CVE-2023-47272 [cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download]
 	- roundcube 1.6.5+dfsg-1 (bug #1055421)
 	NOTE: https://github.com/roundcube/roundcubemail/commit/81ac3c342a4f288deb275590895b52ec3785cf8a (1.6.5)
 CVE-2023-47235 (An issue was discovered in FRRouting FRR through 9.0.1. A crash can oc ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c24dd722fee9329a38c6a94d98178bcc540234e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c24dd722fee9329a38c6a94d98178bcc540234e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231106/40dbdd50/attachment.htm>