Date: Sat, 23 May 2020 12:31:37 +0000 (UTC) From: Jochen Neumeister <joneum@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r536295 - head/security/vuxml Message-ID: <202005231231.04NCVbe3048247@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: joneum Date: Sat May 23 12:31:36 2020 New Revision: 536295 URL: https://svnweb.freebsd.org/changeset/ports/536295 Log: Add entry for piwigo PR: 245153 Sponsored by: Netzkommune GmbH Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Sat May 23 12:27:19 2020 (r536294) +++ head/security/vuxml/vuln.xml Sat May 23 12:31:36 2020 (r536295) @@ -58,6 +58,33 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="436d7f93-9cf0-11ea-82b8-4c72b94353b5"> + <topic>piwigo -- Multible Vulnerabilities</topic> + <affects> + <package> + <name>piwigo</name> + <range><lt>2.10.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Piwigo reports:</p> + <blockquote cite="https://www.piwigo.org/release-2.10.2">; + <p>Piwigo 2.10.1 is affected by stored XSS + via the Group Name Field to the group_list page.</p> + </blockquote> + </body> + </description> + <references> + <url>http://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-8089</url>; + <cvename>CVE-2020-8089</cvename> + </references> + <dates> + <discovery>2020-02-07</discovery> + <entry>2020-05-23</entry> + </dates> + </vuln> + <vuln vid="676ca486-9c1e-11ea-8b5e-b42e99a1b9c3"> <topic>Apache Tomcat Remote Code Execution via session persistence</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202005231231.04NCVbe3048247>