oss-sec mailing list archives

CVE request: transmission <1.61 CSRF

From: Marcus Meissner <meissner () suse de>
Date: Thu, 21 May 2009 08:38:33 +0200

Hi,

spotted here:
http://www.transmissionbt.com/index.php

Transmission 1.61 Released!
A complete list of tickets closed can be seen here. 
Thanks to CacheFly for providing bandwidth. 
 
 All Platforms 
 Close potential CSRF security hole for Web Client users
 ...

Also fixed in previous series apparently:
Transmission 1.53 Released!
..
Close potential CSRF security hole for Web Client users
Fix locale error in the JSON parser
...


Ciao, Marcus

Current thread:

CVE request: transmission <1.61 CSRF Marcus Meissner (May 20)
- Re: CVE request: transmission <1.61 CSRF Steven M. Christey (May 21)