Date: Thu, 19 Oct 2017 19:59:16 +0000 (UTC) From: Steve Wills <swills@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r452465 - head/security/vuxml Message-ID: <201710191959.v9JJxGVp022581@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: swills Date: Thu Oct 19 19:59:15 2017 New Revision: 452465 URL: https://svnweb.freebsd.org/changeset/ports/452465 Log: Document cacti issue Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Thu Oct 19 19:16:21 2017 (r452464) +++ head/security/vuxml/vuln.xml Thu Oct 19 19:59:15 2017 (r452465) @@ -58,6 +58,34 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="e1cb9dc9-daa9-44db-adde-e94d900e2f7f"> + <topic>cacti -- Cross Site Scripting issue</topic> + <affects> + <package> + <name>cacti</name> + <range><lt>1.1.26</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>cacti developers report:</p> + <blockquote cite=" https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd"> + <p>The file include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.</p> + </blockquote> + </body> + </description> + <references> + <url>http://www.securitytracker.com/id/1039569</url> + <url>https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd</url> + <url>https://github.com/Cacti/cacti/issues/1010</url> + <cvename>CVE-2017-15194</cvename> + </references> + <dates> + <discovery>2017-10-10</discovery> + <entry>2017-10-19</entry> + </dates> + </vuln> + <vuln vid="b95e5674-b4d6-11e7-b895-0cc47a494882"> <topic>arj -- multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201710191959.v9JJxGVp022581>