[Git][security-tracker-team/security-tracker][master] CVE-2023-28362: Add short description and Debian bug reference

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3bebbddb by Salvatore Bonaccorso at 2023-09-01T22:48:48+02:00
CVE-2023-28362: Add short description and Debian bug reference

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23608,9 +23608,9 @@ CVE-2023-28364 (An Open Redirect vulnerability exists prior to version 1.52.117,
 	- brave-browser <itp> (bug #864795)
 CVE-2023-28363
 	RESERVED
-CVE-2023-28362
+CVE-2023-28362 [Possible XSS via User Supplied Values to redirect_to]
 	RESERVED
-	- rails <unfixed>
+	- rails <unfixed> (bug #1051058)
 	NOTE: https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
 	NOTE: https://github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5 (main)
 	NOTE: https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441 (v6.1.7.4)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bebbddbf4ae831bf4bcf0a100b3e32acac0a384

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3bebbddbf4ae831bf4bcf0a100b3e32acac0a384
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230901/03fe7e33/attachment.htm>