oss-security - CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Fri, 18 Jun 2010 14:14:08 -0600
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities

Moodle 1.9.9 and 1.8.13 fix a few security issues:

http://docs.moodle.org/en/Moodle_1.9.9_release_notes
http://docs.moodle.org/en/Moodle_1.8.13_release_notes

Which address the following issues:

* MSA-10-0010 Persistent Cross Site Scripting vulnerability in the MNET access control interface
* MSA-10-0011 Cross Site Scripting vulnerability in blog/index.php
* MSA-10-0012 KSES Security Filter Bypassing vulnerability
* MSA-10-0013 Potential Cross Site Scripting vulnerability in Quiz reports

Could CVE names be assigned to these issues please?  Thanks!

-- 
Vincent Danen / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.