View | Details | Raw Unified | Return to bug 251141 | Differences between
and this patch

Collapse All | Expand All

(-)security/vuxml/vuln.xml (+39 lines)
Lines 58-63 Link Here
58 
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
 58 
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
59 
-->
 59 
-->
60 
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
 60 
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
61 
  <vuln vid="19259833-26b1-11eb-a239-1c697a013f4b">
62 
    <topic>mantis -- multiple vulnerabilities</topic>
63 
    <affects>
64 
      <package>
65 
	<name>mantis-php72</name>
66 
	<name>mantis-php73</name>
67 
	<name>mantis-php74</name>
68 
	<name>mantis-php80</name>
69 
	<range><lt>2.24.3</lt></range>
70 
      </package>
71 
    </affects>
72 
    <description>
73 
      <body xmlns="http://www.w3.org/1999/xhtml">
74 
	<p>Mantis 2.24.3 release reports:</p>
75 
	<blockquote cite="https://mantisbt.org/bugs/changelog_page.php?project=mantisbt&amp;version=2.24.3">
76 
	  <p>This release fixes 3 security issues:</p>
77 
	  <ul>
78 
	    <li>0027039: CVE-2020-25781: Access to private bug note attachments</li>
79 
	    <li>0027275: CVE-2020-25288: HTML Injection on bug_update_page.php</li>
80 
	    <li>0027304: CVE-2020-25830: HTML Injection in bug_actiongroup_page.php</li>
81 
	  </ul>
82 
	</blockquote>
83 
      </body>
84 
    </description>
85 
    <references>
86 
      <freebsdpr>ports/251141</freebsdpr>
87 
      <cvename>CVE-2020-25781</cvename>
88 
      <url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25781</url>
89 
      <cvename>CVE-2020-25288</cvename>
90 
      <url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25288</url>
91 
      <cvename>CVE-2020-25830</cvename>
92 
      <url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25830</url>
93 
    </references>
94 
    <dates>
95 
      <discovery>2020-09-13</discovery>
96 
      <entry>2020-11-14</entry>
97 
    </dates>
98 
  </vuln>
99 

            

        

          61
          
  <vuln vid="db4b2f27-252a-11eb-865c-00155d646400">

          100
          
  <vuln vid="db4b2f27-252a-11eb-865c-00155d646400">

        

        

          62
          
    <topic>go -- math/big: panic during recursive division of very large numbers; cmd/go: arbitrary code execution at build time through cgo</topic>

          101
          
    <topic>go -- math/big: panic during recursive division of very large numbers; cmd/go: arbitrary code execution at build time through cgo</topic>

        

        

          63
          
    <affects>

          102
          
    <affects>

        






  

  Return to bug 251141