oss-security - CVE Request -- Drupal 6 Date / Calendar XSS vulnerability

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [month] [year] [list]

Date: Fri, 24 Jul 2009 20:01:07 +0200
From: Jan Lieskovsky <jlieskov@...hat.com>
To: "Steven M. Christey" <coley@...us.mitre.org>
CC: oss-security@...ts.openwall.com
Subject: CVE Request -- Drupal 6 Date / Calendar XSS vulnerability 

Hello Steve, vendors,

   a XSS flaw in Drupal's Calendar module has been reported:

       http://lampsecurity.org/drupal-date-xss-vulnerability

Could you allocate a new CVE id for it?

Thanks && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.