mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-20 00:21:35 +00:00
Code Issues Releases Activity

Add entry for www/mybb

Browse Source 
Sponsored by:	Netzkommune GmbH
This commit is contained in:
Jochen Neumeister 2020-07-09 21:52:27 +00:00
parent 6efc94fbfd
commit 9a21b35851
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=541823
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
security/vuxml/vuln.xml
View File

@ -58,6 +58,35 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="198a120d-c22d-11ea-9172-4c72b94353b5">
<topic>mybb -- multible vulnerabilities</topic>
<affects>
<package>
<name>mybb</name>
<range><lt>1.8.22</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>mybb Team reports:</p>
<blockquote cite="https://blog.mybb.com/2019/12/30/mybb-1-8-22-released-security-maintenance-release/">
<p>High risk: Installer RCE on settings file write</p>
<p>Medium risk: Arbitrary upload paths and Local File Inclusion RCE</p>
<p>Medium risk: XSS via insufficient HTML sanitization of Blog feed and Extend data</p>
<p>Low risk: Open redirect on login</p>
<p>Low risk: SCEditor reflected XSS</p>
</blockquote>
</body>
</description>
<references>
<url>https://blog.mybb.com/2019/12/30/mybb-1-8-22-released-security-maintenance-release/</url>
</references>
<dates>
<discovery>2019-12-30</discovery>
<entry>2020-07-09</entry>
</dates>
</vuln>
<vuln vid="20b46222-c12b-11ea-abe8-08002728f74c">
<topic>kramdown -- template option vulnerability</topic>
<affects>