Re: Moodle security notifications public

[cve-assign () mitre org]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> > MSA-14-0029: Cross-site scripting vulnerability in exception dialogues

> > CVE identifier:    CVE-2014-354

> What is the correct CVE ID for the
> https://moodle.org/mod/forum/discuss.php?d=264270 page? CVE-2014-354
> is malformed.

We're not sure why the reply to this message didn't have a Cc to the
oss-security list, but (in any case) the correct CVE ID for a publicly
known vulnerability isn't private information, so we can directly
forward the ID here.

CVE-2014-3548 is correct, and
https://moodle.org/mod/forum/discuss.php?d=264270 has been updated.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJTzRxwAAoJEKllVAevmvmsedwH/RXmxlVNMjeb4jlFJ/pEqfEW
JDoHvNAajBTZHOAyWhfVEHG1OdMUWtY8FvMtRqV1Yu5+Lhiyatm61860I1X/+4Bm
SPFaAHp+J/U67VWLra+u+E64usAUAKRIb8Nkhm0XrM70D7oBUX8zny4dXC/nc7gC
f2Eb2WPFYcWWKs8cM/gPeQv0gJotAO+ethPeiwZM+E7qRTuxu1Bny/j4d5f+BrAn
3g8ci3lCIrzKz6ulmYsxh9yEMYxlIH8awDTGRX31HryUGNFbGEr0rIY5gT2ETMlF
nCWuphKaAyI20LkUywbi+++w2KNzeUJxLwI7ZUOpp7PmwEfIYRVOF5ALxRO9Ib0=
=x+Vl
-----END PGP SIGNATURE-----