oss-security - CVE request for Drupal contributed modules

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CABbbngBRMBAf5gdcbv3rA878B2nFhsLgVQoHq4mo1TP_fGhw7Q@mail.gmail.com>
Date: Fri, 9 Aug 2013 16:29:56 -0700
From: Forest Monsen <forest.monsen@...il.com>
To: Kurt Seifried <kseifried@...hat.com>
Cc: oss-security@...ts.openwall.com
Subject: CVE request for Drupal contributed modules

Hi there,

I'd like to request CVE identifiers for...

SA-CONTRIB-2013-061 - Flippy - Access Bypass
https://drupal.org/node/2054701

SA-CONTRIB-2013-062 - RESTful Web Services (RESTWS) - Access Bypass
https://drupal.org/node/2059603

SA-CONTRIB-2013-063 - Authenticated User Page Caching (Authcache) -
Information Disclosure
https://drupal.org/node/2059589

SA-CONTRIB-2013-064 - Persona - Cross site request forgery (CSRF)
https://drupal.org/node/2059599

SA-CONTRIB-2013-065 - Organic Groups - Access Bypass
https://drupal.org/node/2059765

SA-CONTRIB-2013-066 - Monster Menus - Multiple Vulnerabilities
(Looks like two here: XSS, and an Access Bypass vuln)
https://drupal.org/node/2059823

Thanks!

Best,
Forest

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.