From d4624bb63dcb47d0436ff74cd3d8ea5b640226ab Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Fri, 30 Jun 2023 22:00:29 +0200 Subject: [PATCH] chg: [security] add reserved CVE for error-based padding oracle --- content/security.md | 1 + 1 file changed, 1 insertion(+) diff --git a/content/security.md b/content/security.md index 45c1b93..48432af 100755 --- a/content/security.md +++ b/content/security.md @@ -95,6 +95,7 @@ We firmly believe that, even though unfortunately it is often not regarded as co - [CVE-2023-28606](https://cvepremium.circl.lu/cve/CVE-2023-28606) < MISP 2.4.169 - js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips. - [CVE-2023-28607](https://cvepremium.circl.lu/cve/CVE-2023-28607) < MISP 2.4.169 - js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip. - [CVE-2023-28884](https://cvepremium.circl.lu/cve/CVE-2023-28884) < MISP 2.4.170 - app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index. +- CVE-2023-37306 - error-based padding oracle ## PGP Key