oss-sec mailing list archives

CVE Request -- pootle -- XSS via 'match_names' parameter on translate.html page


From: Jan Lieskovsky <jlieskov () redhat com>
Date: Mon, 22 Nov 2010 15:35:22 +0100

Hello Steve, vendors,

  looks like the following didn't get a CVE identifier yet:
[1] https://bugzilla.redhat.com/show_bug.cgi?id=647832
[2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=604060
[3] http://forums.cnet.com/7726-6132_102-5022830.html
[4] http://sourceforge.net/projects/translate/files//Pootle/2.1.2/RELEASE.txt/view
[5] http://www.xssed.com/mirror/70160/
[6] http://secunia.com/advisories/42185/

Could you please allocate one?

Thanks && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team


Current thread: