oss-security - Re: CVE request: phorum

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <767388709.1717321274203011447.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Tue, 18 May 2010 13:16:51 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE request: phorum < 5.2.15 backend XSS


----- "Hanno Böck" <hanno@...eck.de> wrote:

> Release notes:
> http://www.facebook.com/note.php?note_id=371190874581
> 
> 
> "It also has some security fixes for another less important XSS where a
> user could "attack himself" with adding an invalid email address (thanks
> to Carlos Ghan for pointing out this issue), see the changelog below for
> details. "
> 

Does someone have some additional details for this? I don't see enough
information for me to assign a CVE id.

Thanks

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.