oss-security - Re: [SECURITY] CVE-2018-1321: Remote code execution by administrators with report and template entitlements

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <87zi2yojrr.fsf@fifthhorseman.net>
Date: Fri, 23 Mar 2018 16:10:16 +0000
From: Daniel Kahn Gillmor <dkg@...thhorseman.net>
To: Francesco Chicchiriccò <ilgrosso@...che.org>,
 oss-security@...ts.openwall.com
Subject: Re: [SECURITY] CVE-2018-1321: Remote code execution by administrators with report and template entitlements

On Mon 2018-03-19 12:47:45 +0100, Francesco Chicchiriccò wrote:
> CVE-2018-1321: Remote code execution by administrators with report and 
> template entitlements

Thanks for the report!  for future reports, please put the *name* of the
project clearly in the subject line and prominently in the message body.

I had to read down into the footnotes to figure out what this report was
talking about :P

All the best,

        --dkg

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.