[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201401201701.s0KH1F7O023821@linus.mitre.org>
Date: Mon, 20 Jan 2014 12:01:15 -0500 (EST)
From: cve-assign@...re.org
To: carnil@...ian.org
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com, taffit@...ian.org
Subject: Re: CVE request: spip: cross-site scripting vulnerability
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> I would like to request a CVE for the following cross-site scripting
> vulnerability in spip: authors could inject code via their name, which
> is displayed in the signature of their articles and author page.
>
> http://core.spip.org/projects/spip/repository/revisions/20902
> http://core.spip.org/projects/spip/repository/revisions/20972
Use CVE-2013-7303.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJS3VXGAAoJEKllVAevmvmslTsH/0yvyNjPNeUZPRcXSi90qY9I
GlJrGi6+j/H1qxryhdZqQMLBhghIwdh54kJWHBSQauZ/rVZ1NwZXaF+Vq8otzTAP
SAtfOHoVxXhVCKkiu6yXkq+NvZzYa86wc7sUiZTS8tFg3/0UbmDqEyFpqPUF3LH3
ZdkUOscGI8zuc9IzVk5TvBjyeEU2lHRvFYlvwTA1CDQ1xA63F9eFrPdTJdrHgqrz
FtactymuoBuuZlOK9WU4SzbTuYoLjC0yNU+6JmWfqoABEQb56DVOCsw/G475Cx4h
+0sZm9rwxR8KX4PrZPgVq6MxNasBfBCY+Il4Qr+1dbq2Ih200aFs+JG3kSfVQPw=
=gkGc
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
