[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201406041505.s54F53MN012908@linus.mitre.org>
Date: Wed, 4 Jun 2014 11:05:03 -0400 (EDT)
From: cve-assign@...re.org
To: thijs@...ian.org
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request: mediawiki invalid usernames on Special:PasswordReset were parsed as wikitext
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> https://bugzilla.wikimedia.org/show_bug.cgi?id=65501
> invalid usernames on Special:PasswordReset were parsed as wikitext ...
> could potentially lead to an xss crossing a privilege boundary
Use CVE-2014-3966.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJTjzUKAAoJEKllVAevmvms3m0H/30lQ070bNB7iCT0dq78dqK7
68dv98nM/DFos1TnyvBrYPQp+opf1fGv2jjquenpnAfI/rG0/jp9sxDhAC6tn/NT
EHkCwiGMfgaG0T52NaxCQC2TitKh9eqTIrhP2DznmXfq64mqtAKM7HVNkgm8K7ES
JGMeih9pxoURZPmLG+3NRFs4AtZQuPKQYEhBQxTocuCfxcjQarfdvA02i+R0niv8
GJHLGnSrxlVaWOwOy2eF6557ASyUzIY4T4txh3jHvmht/0xtVTRuB2MRUHaJ6cjw
hOn8/EnVO9OgsGku7+KuwkOXLpkIJEBJTjke/CoE10dCY52dtCykJv8OA9HRNwE=
=e6Ww
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
