Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 0dd32f9e by Salvatore Bonaccorso at 2019-11-05T20:20:23Z Add CVE-2019-17221/phantomjs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -6964,7 +6964,8 @@ CVE-2019-17223 (There is HTML Injection in the Note field in Dolibarr ERP/CRM 10 CVE-2019-17222 RESERVED CVE-2019-17221 (PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as d ...) - TODO: check + - phantomjs <unfixed> + NOTE: https://www.darkmatter.ae/blogs/breaching-the-perimeter-phantomjs-arbitrary-file-read/ CVE-2019-17220 (Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line. ...) NOT-FOR-US: Rocket.Chat CVE-2019-17219 (An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ether ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0dd32f9edb961f1b1d52debb895f89198a1d1aac -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0dd32f9edb961f1b1d52debb895f89198a1d1aac You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits