[Git][security-tracker-team/security-tracker][master] Add new sogo issue (CVE-2023-48104)

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
949c8b41 by Salvatore Bonaccorso at 2024-01-16T09:25:00+01:00
Add new sogo issue (CVE-2023-48104)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -37,7 +37,8 @@ CVE-2023-49107 (Generation of Error Message Containing Sensitive Information vul
 CVE-2023-49106 (Missing Password Field Masking vulnerability in Hitachi Device Manager ...)
 	NOT-FOR-US: Hitachi
 CVE-2023-48104 (Alinto SOGo 5.8.0 is vulnerable to HTML Injection.)
-	TODO: check
+	- sogo <unfixed>
+	NOTE: Fixed by: https://github.com/Alinto/sogo/commit/7481ccf37087c3f456d7e5a844da01d0f8883098 (SOGo-5.9.1)
 CVE-2023-47460 (SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a rem ...)
 	NOT-FOR-US: Knovos Discovery
 CVE-2023-47459 (An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obt ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/949c8b41c6f44c64f82053d6d89c70ae36704825

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/949c8b41c6f44c64f82053d6d89c70ae36704825
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240116/a2bab711/attachment.htm>