[Git][security-tracker-team/security-tracker][master] Process Apache Zeppelin NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
be63b13c by Salvatore Bonaccorso at 2024-04-09T22:14:39+02:00
Process Apache Zeppelin NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -37,13 +37,13 @@ CVE-2024-3046 (In Eclipse Kura LogServlet component included in versions 5.0.0 t
 CVE-2024-31978 (A vulnerability has been identified in SINEC NMS (All versions < V2.0  ...)
 	TODO: check
 CVE-2024-31868 (Improper Encoding or Escaping of Output vulnerability in Apache Zeppel ...)
-	TODO: check
+	NOT-FOR-US: Apache Zeppelin
 CVE-2024-31867 (Improper Input Validation vulnerability in Apache Zeppelin.  The attac ...)
-	TODO: check
+	NOT-FOR-US: Apache Zeppelin
 CVE-2024-31866 (Improper Encoding or Escaping of Output vulnerability in Apache Zeppel ...)
-	TODO: check
+	NOT-FOR-US: Apache Zeppelin
 CVE-2024-31865 (Improper Input Validation vulnerability in Apache Zeppelin.  The attac ...)
-	TODO: check
+	NOT-FOR-US: Apache Zeppelin
 CVE-2024-31864 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
 	TODO: check
 CVE-2024-31863 (Authentication Bypass by Spoofing vulnerability by replacing to exsiti ...)
@@ -88931,7 +88931,7 @@ CVE-2022-47896 (In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were v
 CVE-2022-47895 (In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" act ...)
 	- intellij-idea <itp> (bug #747616)
 CVE-2022-47894 (Improper Input Validation vulnerability in Apache Zeppelin SAP.This is ...)
-	TODO: check
+	NOT-FOR-US: Apache Zeppelin
 CVE-2022-47893 (There is a remote code execution vulnerability that affects all versio ...)
 	NOT-FOR-US: NetMan 204
 CVE-2022-47892 (All versions of NetMan 204 could allow an unauthenticated remote attac ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be63b13ca76a934066745fb3d7d23f43e5087256

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be63b13ca76a934066745fb3d7d23f43e5087256
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240409/b3a9e2e5/attachment.htm>