oss-security - CVE Request: JIRA Issues

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <201004161547.24490.eren@pardus.org.tr>
Date: Fri, 16 Apr 2010 15:47:24 +0300
From: Eren Türkay <eren@...dus.org.tr>
To: oss-security@...ts.openwall.com
Subject: CVE Request: JIRA Issues

Hello,

As you probably know, Apache.org services were taken down due to the XSS and 
privilege escalation flaws in JIRA. Atlassian patched the issues, and released 
an advisory.

Bug entires:

XSS Vulnerability: http://jira.atlassian.com/browse/JRA-20994
Privilege escalation: http://jira.atlassian.com/browse/JRA-20995

JIRA Advisory: 
http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16

Could anyone assign CVE IDs for these issues?

Thanks,
-- 
Eren

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.