jeremylong / DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
https://owasp.org/www-project-dependency-check/
Apache License 2.0
6.03k stars 1.21k forks source link

[FP]: CVE-2017-17762 on EPiServer.CMS.TinyMce #6713

Open tomahg opened 3 weeks ago

tomahg commented 3 weeks ago

Package URl

pkg:nuget/EPiServer.CMS.TinyMce@4.7.2

CPE

cpe:2.3:a:episerver:episerver:4.7.2:*:*:*:*:*:*:*

CVE

CVE-2017-17762

ODC Integration

{"label"=>"CLI"}

ODC Version

9.2.0

Description

Additional CPE listed: cpe:2.3:a:episerver:episerver_cms:4.7.2:*:*:*:*:*:*:*

github-actions[bot] commented 3 weeks ago

Failed to automatically evaluate the false positive. See: https://github.com/jeremylong/DependencyCheck/actions/runs/9396843680