[Git][security-tracker-team/security-tracker][master] Add CVE-2024-8517/spip

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
381ebdc4 by Salvatore Bonaccorso at 2024-09-06T22:28:47+02:00
Add CVE-2024-8517/spip

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,7 @@
 CVE-2024-8517 (SPIP before 4.3.2, 4.2.16, and  4.1.18 is vulnerable to a command inje ...)
-	TODO: check
+	- spip 4.3.2+dfsg-1
+	NOTE: https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-3-2-SPIP-4-2-16-SPIP-4-1-18.html?lang=fr
+	NOTE: https://thinkloveshare.com/hacking/spip_preauth_rce_2024_part_2_a_big_upload/
 CVE-2024-8509 (A vulnerability was found in Forklift Controller. There is no verifica ...)
 	TODO: check
 CVE-2024-8428 (The ForumWP \u2013 Forum & Discussion Board Plugin plugin for WordPres ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/381ebdc4cf6dc97b8f99053e670f888d311e6242

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/381ebdc4cf6dc97b8f99053e670f888d311e6242
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240906/7c282ff7/attachment-0001.htm>