Conversation

Notices

1. Embed this notice
   chjara (chjara@snowdin.town)'s status on Tuesday, 18-Jul-2023 04:08:33 JST chjara
   two kinds of CVE:
   - code execution by remote untrusted user (severity: low)
   - using deprecated configuration option could cause information leak to system administrator (severity: extreme)
   • Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 18-Jul-2023 04:09:28 JST Haelwenn /элвэн/ :triskell:

     in reply to
     @chjara Meanwhile cve's website: https://github.com/CVEProject/cve-website/pulls?q=is%3Apr+security
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 18-Jul-2023 04:13:01 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Haelwenn /элвэн/ :triskell:
     @chjara Also I'm glad to see ones that haven't been merged after 6 months, imagine injecting a funny json to CVE.org (prototype pollution vuln so maybe you get JS injection?)