oss-sec mailing list archives
Re: CVE request: askbot xss
From: cve-assign () mitre org
Date: Fri, 28 Feb 2014 15:02:46 -0500 (EST)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
https://bugzilla.redhat.com/show_bug.cgi?id=1070852
askbot: multiple XSS issues fixed in 0.7.49
The question search XSS was reported by Kamil Sevi (@kamilsevi) for askbot running on https://ask.fedoraproject.org/
Use CVE-2014-2235 for this specific discovery.
Additional issues were noticed when investigating the report.
Use CVE-2014-2236 for all of the other XSS issues. - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEcBAEBAgAGBQJTEOr9AAoJEKllVAevmvmsdp8IAMVkIgguv6Qbv7M9/ZqVcutq aLy1sPvONJ0UnmZ9+02k0yHCRHO4vZjQBX3ocMg03s1D25zXeRIYO6BeQPpXxUUd BPJkkulO5DjJ23DrL8mlFeQbS66DgtZnJwf9NhAUXjKjfJnjRpBz1FamfeTBYWiQ ZmqM7/og5Bat30cgA7y1oHiR0OVkWIdMYbnLzs/y6k6RmS+bmC7iE5N3TjUob3co qn/jvwxA3sTs0sF0Mc0dqUIWly762g7Otss+wrNp/+V+8YPJRYACRJxKfrS776Nn GnLrj3q4E+4ImgxEcJjg+fj9E/Hksgr8hOVuPymLHb5DwKUhVJNbR+fQ29p0t6Y= =rFHx -----END PGP SIGNATURE-----
Current thread:
- CVE request: askbot xss Tomas Hoger (Feb 27)
- Re: CVE request: askbot xss cve-assign (Feb 28)