Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
da6f3c7d by Salvatore Bonaccorso at 2026-08-14T08:33:01+02:00
Add two new phplist issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -294,9 +294,9 @@ CVE-2026-73484 (Flowise before 3.1.3 contains a sandbox
escape vulnerability in
CVE-2026-73483 (Flowise (packages flowise and flowise-components) in versions
<= 3.1.2 ...)
NOT-FOR-US: Flowise
CVE-2026-73482 (phpList before 3.7.0-RC5 contains a cross-site request forgery
(CSRF) ...)
- TODO: check
+ - phplist <itp> (bug #612288)
CVE-2026-73481 (phpList before 3.7.0-RC5 fail to enforce CSRF token validation
on the ...)
- TODO: check
+ - phplist <itp> (bug #612288)
CVE-2026-73403 (Unauthenticated Broken Access Control in User Registration <=
5.2.6 ve ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-73401 (Unauthenticated Broken Access Control in InstaWP Connect <=
0.1.3.7 ve ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da6f3c7dc9e7329f6a7f2c539963030fae1f0d36
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da6f3c7dc9e7329f6a7f2c539963030fae1f0d36
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
