[Git][security-tracker-team/security-tracker][master] Add CVE-2024-36399/kanboard

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
686c8840 by Salvatore Bonaccorso at 2024-06-06T22:48:45+02:00
Add CVE-2024-36399/kanboard

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -189,7 +189,9 @@ CVE-2024-36732 (An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to caus
 CVE-2024-36730 (Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attack ...)
 	TODO: check
 CVE-2024-36399 (Kanboard is project management software that focuses on the Kanban met ...)
-	TODO: check
+	- kanboard <unfixed>
+	NOTE: https://github.com/kanboard/kanboard/security/advisories/GHSA-x8v7-3ghx-65cv
+	NOTE: https://github.com/kanboard/kanboard/commit/b6703688aac8187f5ea4d4d704fc7afeeffeafa7 (v1.2.37)
 CVE-2024-36394 (SysAid - CWE-78: Improper Neutralization of Special Elements used in a ...)
 	NOT-FOR-US: SysAid
 CVE-2024-36393 (SysAid - CWE-89: Improper Neutralization of Special Elements used in a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/686c8840cc8e4cbcd20e8a4fc02eb6afd9932821

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/686c8840cc8e4cbcd20e8a4fc02eb6afd9932821
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240606/eaacf1ff/attachment-0001.htm>