Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
700ff44c by Sylvain Beucler at 2023-12-23T10:25:02+01:00
CVE-2023-51448/cacti: reference introductory commit / previous CVE fix
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -50,7 +50,9 @@ CVE-2023-51649 (Nautobot is a Network Source of Truth and
Network Automation Pla
NOT-FOR-US: Nautobot
CVE-2023-51448 (Cacti provides an operational monitoring and fault management
framewor ...)
- cacti <unfixed>
+ [buster] - cacti <not-affected> (Vulnerable code introduced later)
NOTE:
https://github.com/Cacti/cacti/security/advisories/GHSA-w85f-7c4w-7594
+ NOTE: Introduced by:
https://github.com/Cacti/cacti/commit/7b1ae5bcab3caca020da0080e19ac51c2743adfe
(release/1.2.25, CVE-2023-30534)
CVE-2023-51035 (TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to
arbitrary com ...)
NOT-FOR-US: TOTOLINK
CVE-2023-51034 (TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to
arbitrary com ...)
@@ -36408,6 +36410,7 @@ CVE-2023-30534 (Cacti is an open source operational
monitoring and fault managem
NOTE:
https://github.com/Cacti/cacti/commit/6d22e0623dfbc5d687d8f61e683173d0d625f3a7
(release/1.2.25)
NOTE:
https://github.com/Cacti/cacti/commit/7b1ae5bcab3caca020da0080e19ac51c2743adfe
(release/1.2.25)
NOTE:
https://github.com/Cacti/cacti/commit/35d76a87d10ffeec483c768663013746624cecbf
(release/1.2.25)
+ NOTE: Be careful. Introduces CVE-2023-51448.
CVE-2023-30533 (SheetJS Community Edition before 0.19.3 allows Prototype
Pollution via ...)
NOT-FOR-US: SheetJS
CVE-2023-2011
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/700ff44c5c12cbb4024757854242d4e86b400bb3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/700ff44c5c12cbb4024757854242d4e86b400bb3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
