[Git][security-tracker-team/security-tracker][master] Add CVE-2025-4215/ublock-origin

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat May 3 13:44:34 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
14d42429 by Salvatore Bonaccorso at 2025-05-03T14:44:12+02:00
Add CVE-2025-4215/ublock-origin

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7,7 +7,8 @@ CVE-2025-4222 (The Database Toolset plugin for WordPress is vulnerable to Sensit
 CVE-2025-4218 (A vulnerability was found in handrew browserpilot up to 0.2.51. It has ...)
 	NOT-FOR-US: handrew browserpilot
 CVE-2025-4215 (A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It ...)
-	TODO: check
+	- ublock-origin <unfixed>
+	NOTE: https://github.com/gorhill/uBlock/commit/eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c (1.63.3b17)
 CVE-2025-4199 (The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Sit ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-4198 (The Alink Tap plugin for WordPress is vulnerable to Cross-Site Request ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14d42429d1785fdeed558c0df42f2d04ca786365

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14d42429d1785fdeed558c0df42f2d04ca786365
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250503/0f7d03fd/attachment.htm>


More information about the debian-security-tracker-commits mailing list