oss-security - CVE Request -- Drupal 6 Date / Calendar XSS vulnerability

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 24 Jul 2009 20:01:07 +0200
From: Jan Lieskovsky <jlieskov@...hat.com>
To: "Steven M. Christey" <coley@...us.mitre.org>
CC: oss-security@...ts.openwall.com
Subject: CVE Request -- Drupal 6 Date / Calendar XSS vulnerability 

Hello Steve, vendors,

   a XSS flaw in Drupal's Calendar module has been reported:

       http://lampsecurity.org/drupal-date-xss-vulnerability

Could you allocate a new CVE id for it?

Thanks && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.