oss-security - CVE request: stored XSS in PowerDNS

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <563C6DDC.8@sysdream.com>
Date: Fri, 6 Nov 2015 10:07:40 +0100
From: Damien Cauquil <d.cauquil@...dream.com>
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: CVE request: stored XSS in PowerDNS < 3.4.7

PowerDNS < 3.4.7 was prone to a stored XSS vulnerability, now fixed in
version 3.4.7.


This commit by the PowerDNS team fixes it:

https://github.com/PowerDNS/pdns/commit/416d252


Could a CVE be assigned to this issue ?

Thanks

-- 

Damien Cauquil
Directeur R&D / Head of Research
Certified EC-Council Instructor / CEH / CHFI / ECSA

Sysdream
14, place Marie-Jeanne Bassot
92300 Levallois-Perret 

Tel: +33 (0)1 78 76 58 21

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.