Merge pull request #111218 from dotlambda/limesurvey-insecure

limesurvey: mark as insecure
This commit is contained in:
Daniël de Kok 2021-01-30 11:37:14 +01:00 committed by GitHub
commit 256eb05dad
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -37,5 +37,10 @@ stdenv.mkDerivation rec {
homepage = "https://www.limesurvey.org";
maintainers = with maintainers; [offline];
platforms = with platforms; unix;
knownVulnerabilities = [
# https://github.com/LimeSurvey/LimeSurvey/blob/3.x-LTS/docs/release_notes.txt
"Unauthorized access to statistics of a survey with certain permission configurations"
"Persistent XSS in browse response"
];
};
}