Even more typos lol

Author: todb

cves/CVE-2023-2905.md

@@ -13,7 +13,7 @@ Any questions about this disclosure should be directed to **cve@takeonme.org**.
 
 # Executive Summary
 
-Due to a failure in validating the length of a provided a `MQTT_CMD_PUBLISH` parsed message with a variable length header, the dual-licensed [Cesanta Mongoose](https://github.com/cesanta/mongoose) embeddable web server version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. [CVE-2023-2905] appears to be an instance of [CWE-122](https://cwe.mitre.org/data/definitions/122.html). Version 7.9 and prior does not appear to be vulnerable.
+Due to a failure in validating the length of a provided `MQTT_CMD_PUBLISH` parsed message with a variable length header, the dual-licensed [Cesanta Mongoose](https://github.com/cesanta/mongoose) embeddable web server version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. [CVE-2023-2905] appears to be an instance of [CWE-122](https://cwe.mitre.org/data/definitions/122.html). Version 7.9 and prior does not appear to be vulnerable.
 
 # Technical Details
 
@@ -133,7 +133,7 @@ This issue is being disclosed through the AHA! CNA and is credited to: [zenofex]
 
 # Timeline
 
-* 2023-05-25 (Thu): Initial findings presented at AHA! Meeting 0xffff
+* 2023-05-25 (Thu): Initial findings presented at AHA! Meeting 0x00c8
 * 2023-06-22 (Thu): PoC validated and this disclosure drafted.
 * 2023-06-22 (Thu): Disclosed to the vendor via email at support@cesanta.com.
 * 2023-06-23 (Fri): Vendor acknowledged the vulnerability.