[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 7 Sep 2009 11:41:33 +0200
From: Alex Legler <a3li@...too.org>
To: oss-security@...ts.openwall.com
Subject: Re: viewvc: CVE request: XSS and illegal characters
while printing name-value pairs
On Mon, 7 Sep 2009 10:52:34 +0200, Thomas Biege <thomas@...e.de> wrote:
> Hello,
> I do not have any further details, just this changelog entries:
The two commit messages have more or less detailed information:
> * security fix: validate the 'view' parameter to avoid XSS attack
http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2214
> * security fix: avoid printing illegal parameter names and values
http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2219
Alex
Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
