[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <200808141316.13241.rbu@gentoo.org>
Date: Thu, 14 Aug 2008 13:16:10 +0200
From: Robert Buchholz <rbu@...too.org>
To: oss-security@...ts.openwall.com
Subject: CVE request: openfire login page XSS (JM-629)
Hi all,
a XSS issue in login.jsp in Openfire (formerly Wildfire) up to version
3.5.2 (latest) is currently without fix and without CVE id:
http://www.igniterealtime.org/issues/browse/JM-629
https://bugs.gentoo.org/show_bug.cgi?id=229515
The upstream bug report also mentions another login XSS that was fixed
in 2005 -- http://www.igniterealtime.org/issues/browse/JM-430
Robert
Download attachment "signature.asc " of type "application/pgp-signature" (836 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
