[Git][security-tracker-team/security-tracker][master] Add new CVEs in zammad

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c8288b81 by Salvatore Bonaccorso at 2024-04-26T15:47:48+02:00
Add new CVEs in zammad

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36,11 +36,11 @@ CVE-2024-33670 (Passbolt API before 4.6.2 allows HTML injection in a URL paramet
 CVE-2024-33669 (An issue was discovered in Passbolt Browser Extension before 4.6.2. It ...)
 	NOT-FOR-US: Passbolt Browser Extension
 CVE-2024-33668 (An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cach ...)
-	TODO: check
+	- zammad <itp> (bug #841355)
 CVE-2024-33667 (An issue was discovered in Zammad before 6.3.0. An authenticated agent ...)
-	TODO: check
+	- zammad <itp> (bug #841355)
 CVE-2024-33666 (An issue was discovered in Zammad before 6.3.0. Users with customer ac ...)
-	TODO: check
+	- zammad <itp> (bug #841355)
 CVE-2024-33665 (angular-translate through 2.19.1 allows XSS via a crafted key that is  ...)
 	TODO: check
 CVE-2024-33664 (python-jose through 3.3.0 allows attackers to cause a denial of servic ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8288b81c0c844da8311d789e6ad352a7ab35130

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8288b81c0c844da8311d789e6ad352a7ab35130
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240426/0e072a0a/attachment.htm>