[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Nov 19 12:39:47 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ae8273b3 by Salvatore Bonaccorso at 2023-11-19T13:39:20+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,41 +1,41 @@
 CVE-2023-47685 (Cross-Site Request Forgery (CSRF) vulnerability in Lukman Nakib Preloa ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47672 (Cross-Site Request Forgery (CSRF) vulnerability in Swashata WP Categor ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47671 (Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy Verti ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47670 (Cross-Site Request Forgery (CSRF) vulnerability in Jongmyoung Kim Kore ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47667 (Cross-Site Request Forgery (CSRF) vulnerability in Mammothology WP Ful ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47666 (Cross-Site Request Forgery (CSRF) vulnerability in Code Snippets Pro C ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47664 (Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview Pl ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47655 (Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi ANAC X ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47651 (Cross-Site Request Forgery (CSRF) vulnerability in Robert Macchi WP Li ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47650 (Cross-Site Request Forgery (CSRF) vulnerability in Peter Sterling Add  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47649 (Cross-Site Request Forgery (CSRF) vulnerability in PriceListo Best Res ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47644 (Cross-Site Request Forgery (CSRF) vulnerability in profilegrid Profile ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47556 (Cross-Site Request Forgery (CSRF) vulnerability in James Mehorter Devi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47553 (Cross-Site Request Forgery (CSRF) vulnerability in User Local Inc User ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47552 (Cross-Site Request Forgery (CSRF) vulnerability in Labib Ahmed Image H ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47551 (Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Ma ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47531 (Cross-Site Request Forgery (CSRF) vulnerability in DroitThemes Droit D ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47519 (Cross-Site Request Forgery (CSRF) vulnerability in WC Product Table Wo ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-47243 (Cross-Site Request Forgery (CSRF) vulnerability in CodeMShop \ucf54\ub ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2023-41129 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon Wor ...)
 	TODO: check
 CVE-2023-32514 (Cross-Site Request Forgery (CSRF) vulnerability in Himanshu Parashar G ...)
@@ -61,7 +61,7 @@ CVE-2023-48294 (LibreNMS is an auto-discovering PHP/MySQL/SNMP based network mon
 CVE-2023-48238 (joaquimserafim/json-web-token is a javascript library use to interact  ...)
 	TODO: check
 CVE-2023-48028 (kodbox 1.46.01 has a security flaw that enables user enumeration. This ...)
-	TODO: check
+	NOT-FOR-US: kodbox
 CVE-2023-48017 (Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) v ...)
 	NOT-FOR-US: Dreamer CMS
 CVE-2023-46745 (LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitorin ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae8273b35bb390675b2425305252149506ebede9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae8273b35bb390675b2425305252149506ebede9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231119/0f5ac88a/attachment.htm>


More information about the debian-security-tracker-commits mailing list