Attachment 196447 Details for Bug 230800 – vuln.patch

[patch] vuln.patch

vuxml-1.1_3.patch (text/plain), 1.48 KB, created by Dmitri Goutnik on 2018-08-22 20:26:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Dmitri Goutnik

Created: 2018-08-22 20:26:39 UTC

Size: 1.48 KB

patch

obsolete

>Index: security/vuxml/vuln.xml
>===================================================================
>--- security/vuxml/vuln.xml	(revision 477792)
>+++ security/vuxml/vuln.xml	(working copy)
>@@ -58,6 +58,34 @@
> * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="e53a908d-a645-11e8-8acd-10c37b4ac2ea">
>+ <topic>gogs -- open redirect vulnerability</topic>
>+ <affects>
>+ <package>
>+	<name>gogs</name>
>+	<range><lt>0.11.53_1</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	bluecatli (Tencent's Xuanwu Lab) reports:
>+	<blockquote cite="https://github.com/gogs/gogs/issues/5364">
>+	 The function isValidRedirect in gogs/routes/user/auth.go is used in login action to validate if url is on the same site.
>+	 If the Location header startswith /\, it will be transformed to // by browsers.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://github.com/gogs/gogs/issues/5364</url>
>+ <url>https://github.com/gogs/gogs/pull/5365</url>
>+ <url>https://github.com/gogs/gogs/commit/1f247cf8139cb483276cd8dd06385a800ce9d4b2</url>
>+ </references>
>+ <dates>
>+ <discovery>2018-08-06</discovery>
>+ <entry>2018-08-22</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="9b19b6df-a4be-11e8-9366-0028f8d09152">
> <topic>couchdb -- administrator privilege escalation</topic>
> <affects>

Actions: View | Diff

Attachments on bug 230800: 196418 | 196447