[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201402282002.s1SK2kAG001735@linus.mitre.org>
Date: Fri, 28 Feb 2014 15:02:46 -0500 (EST)
From: cve-assign@...re.org
To: thoger@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request: askbot xss
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> https://bugzilla.redhat.com/show_bug.cgi?id=1070852
> askbot: multiple XSS issues fixed in 0.7.49
> The question search XSS was reported by Kamil Sevi (@kamilsevi) for
> askbot running on https://ask.fedoraproject.org/
Use CVE-2014-2235 for this specific discovery.
> Additional issues were noticed when investigating the report.
Use CVE-2014-2236 for all of the other XSS issues.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJTEOr9AAoJEKllVAevmvmsdp8IAMVkIgguv6Qbv7M9/ZqVcutq
aLy1sPvONJ0UnmZ9+02k0yHCRHO4vZjQBX3ocMg03s1D25zXeRIYO6BeQPpXxUUd
BPJkkulO5DjJ23DrL8mlFeQbS66DgtZnJwf9NhAUXjKjfJnjRpBz1FamfeTBYWiQ
ZmqM7/og5Bat30cgA7y1oHiR0OVkWIdMYbnLzs/y6k6RmS+bmC7iE5N3TjUob3co
qn/jvwxA3sTs0sF0Mc0dqUIWly762g7Otss+wrNp/+V+8YPJRYACRJxKfrS776Nn
GnLrj3q4E+4ImgxEcJjg+fj9E/Hksgr8hOVuPymLHb5DwKUhVJNbR+fQ29p0t6Y=
=rFHx
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
