oss-sec mailing list archives

Re: CVE request: XSS in piwik before 1.9

From: Solar Designer <solar () openwall com>
Date: Tue, 23 Oct 2012 06:50:33 +0400

Kurt, all -

On Tue, Oct 23, 2012 at 01:48:55AM +0000, Kurt Seifried wrote:
[...]

Powered by UserVoice.


I am sorry for letting a spoofed bounce "from Kurt" through to the list.
Apparently, some list member is using UserVoice, whatever that is, and
it has produced this spoofed bounce (really weird).  We'll try to be
more careful in rejecting such bounces going forward.

I now see that Kurt's actual message, with proper quoting and From
address, was already on the list (and this is what triggered the bounce,
presumably).

Alexander

Current thread:

CVE request: XSS in piwik before 1.9 Hanno Böck (Oct 21)
- Re: CVE request: XSS in piwik before 1.9 Kurt Seifried (Oct 22)
  - Re: CVE request: XSS in piwik before 1.9 Matthieu Aubry (Oct 22)
    - Re: CVE request: XSS in piwik before 1.9 Kurt Seifried (Oct 22)
    - Re: Re: CVE request: XSS in piwik before 1.9 Kurt Seifried (Oct 22)
    - Re: CVE request: XSS in piwik before 1.9 Solar Designer (Oct 22)
    - Re: CVE request: XSS in piwik before 1.9 Matthieu Aubry (Oct 23)
    - Re: CVE request: XSS in piwik before 1.9 Kurt Seifried (Oct 23)
    - Re: CVE request: XSS in piwik before 1.9 Stuart Henderson (Oct 24)