Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history

[Rafał Malinowski <rafal.przemyslaw.malinowski () gmail com>]

2012/2/27 Kurt Seifried <kseifried () redhat com>:
> On 02/27/2012 03:05 AM, Jan Lieskovsky wrote:
> > Hello Mariusz, Kurt, Steve, vendors,
> >
> >   [1] though https://bugzilla.novell.com/show_bug.cgi?id=749036#c0
> >   mentions CVE identifier has been already requested for this:
> >
> >   "The bug still doesn't have CVE number but will have in near future."
>
> I can only assume they requested one directly from Mitre. Steve, is this
> the case? If not I'll assign one.

We haven't requested CVE number yet. Could you do that for this issue?