[Git][security-tracker-team/security-tracker][master] new rails issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5f84c676 by Moritz Muehlenhoff at 2024-06-05T13:43:31+02:00
new rails issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51,7 +51,9 @@ CVE-2024-32975 (Envoy is a cloud-native, open source edge and service proxy. The
 CVE-2024-32974 (Envoy is a cloud-native, open source edge and service proxy. A crash w ...)
 	- envoyproxy <itp> (bug #987544)
 CVE-2024-32464 (Action Text brings rich text content and editing to Rails. Instances o ...)
-	TODO: check
+	- rails <not-affected> (Only affects 7.1.x)
+	NOTE: https://github.com/rails/rails/security/advisories/GHSA-prjp-h48f-jgf6
+	NOTE: https://github.com/rails/rails/commit/e215bf3360e6dfe1497c1503a495e384ed6b0995
 CVE-2024-30889 (Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and f ...)
 	NOT-FOR-US: audimexEE
 CVE-2024-2368 (The Mollie Forms plugin for WordPress is vulnerable to Cross-Site Requ ...)
@@ -59,7 +61,9 @@ CVE-2024-2368 (The Mollie Forms plugin for WordPress is vulnerable to Cross-Site
 CVE-2024-2087 (The Brizy \u2013 Page Builder plugin for WordPress is vulnerable to St ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-28103 (Action Pack is a framework for handling and responding to web requests ...)
-	TODO: check
+	- rails <unfixed>
+	NOTE: https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7
+	NOTE: https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523
 CVE-2024-23669 (An improper authorization in Fortinet FortiWebManager version 7.2.0 an ...)
 	NOT-FOR-US: Fortinet
 CVE-2024-23326 (Envoy is a cloud-native, open source edge and service proxy. A theoret ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f84c676281711712c87ad421dec4c0e5ce3fb5e

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f84c676281711712c87ad421dec4c0e5ce3fb5e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240605/fcb156b3/attachment.htm>