oss-sec mailing list archives

Re: CVE request: Mediawiki below 1.15.4 / 1.16.0beta3


From: Josh Bressers <bressers () redhat com>
Date: Tue, 1 Jun 2010 10:17:32 -0400 (EDT)

----- "Hanno Böck" <hanno () hboeck de> wrote:

http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html

One XSS, one CSRF.


These seem clear enough:

CVE-2010-1647 mediawiki 1.15.4 XSS
CVE-2010-1648 mediawiki 1.15.4 CSRF

Thanks.

-- 
    JB


Current thread: