oss-security November 2010 archive
Main Archive Page > Month Archives  > oss-security archives
oss-security: Re: [oss-security] CVE Request -- pootle -- XSS vi

Re: [oss-security] CVE Request -- pootle -- XSS via 'match_names' parameter on translate.html page

From: Josh Bressers <bressers_at_nospam>
Date: Mon Nov 22 2010 - 16:35:31 GMT
To: oss-security@lists.openwall.com

Please use CVE-2010-4245

Thanks.

-- JB ----- "Jan Lieskovsky" <jlieskov@redhat.com> wrote: > Hello Steve, vendors, > > looks like the following didn't get a CVE identifier yet: > [1] https://bugzilla.redhat.com/show_bug.cgi?id=647832 > [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=604060 > [3] http://forums.cnet.com/7726-6132_102-5022830.html > [4] > http://sourceforge.net/projects/translate/files//Pootle/2.1.2/RELEASE.txt/view > [5] http://www.xssed.com/mirror/70160/ > [6] http://secunia.com/advisories/42185/ > > Could you please allocate one? > > Thanks && Regards, Jan. > -- > Jan iankko Lieskovsky / Red Hat Security Response Team