CVE request: Attachment XSS in mantis < 1.2.2

[Hanno Böck <hanno () hboeck de>]

http://www.mantisbt.org/bugs/view.php?id=11952
http://www.mantisbt.org/blog/?p=113

Issue #11952 covers a security fix to the display of inline attachments, where 
“Arbitrary inline attachment rendering could lead to cross-domain scripting or 
other browser attacks”.

-- 
Hanno Böck              Blog:           http://www.hboeck.de/
GPG: 3DBD3B20           Jabber/Mail:    hanno () hboeck de

http://schokokeks.org - professional webhosting

Attachment: signature.asc
Description: This is a digitally signed message part.