Gentoo Project

Webapps

Security Bug Reports

• www-misc/awstats: Arbitrary code execution (CVE-2020-35176)

  759544 - Assigned to Gentoo Security
• <www-apps/wordpress-5.8.3: multiple vulnerabilities

  830715 - Assigned to Gentoo Security
• www-apps/moodle: XSS via crafted topic fields

  870040 - Assigned to Gentoo Security
• www-apps/wordpress: SSRF

  886027 - Assigned to Gentoo Security
• www-apps/mediawiki: multiple vulnerabilities

  890373 - Assigned to Gentoo Security
• www-apps/moodle: XSS in headers and footers

  908086 - Assigned to Gentoo Security
• <mail-client/roundcube-1.6.11 : Post-Auth RCE via PHP Object Deserialization

  957155 - Assigned to Gentoo Security
• <www-apps/drupal-{10.5.10,10.6.9,11.2.12,11.3.10}: critical vulnerabilities in twig and composer

  975694 - Assigned to Gentoo Security