oss-sec mailing list archives

Re: viewvc: CVE request: XSS and illegal characters while printing name-value pairs

From: Ludwig Nussel <ludwig.nussel () suse de>
Date: Fri, 16 Oct 2009 10:29:04 +0200

Thomas Biege wrote:

Version 1.1.2 (released 11-Aug-2009)

  * security fix: validate the 'view' parameter to avoid XSS attack
  * security fix: avoid printing illegal parameter names and values

http://viewvc.tigris.org/source/browse/*checkout*/viewvc/tags/1.1.2/CHANGES


CVE request dropped off the radar I guess.

cu
Ludwig

-- 
 (o_   Ludwig Nussel
 //\   
 V_/_  http://www.suse.de/
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)

Current thread:

Re: viewvc: CVE request: XSS and illegal characters while printing name-value pairs Ludwig Nussel (Oct 16)
- Re: viewvc: CVE request: XSS and illegal characters while printing name-value pairs Josh Bressers (Oct 16)