oss-security - Re: CVE request: Drupal views module CSRF/XSS before 2.11, XSS before 2.12

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 21 Dec 2010 19:37:33 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: Steve Christey <coley@...us.mitre.org>
Subject: Re: CVE request: Drupal views module CSRF/XSS before
 2.11, XSS before 2.12

Sorry for the delay.

----- Original Message -----
> Two CVEs CSRF and XSS before 2.11:
> http://drupal.org/node/829840

Please use CVE-2010-4519 for the CSRF.
CVE-2010-4520 for the XSS.

> 
> One CVE for XSS before 2.12:
> http://drupal.org/node/999380
> 

CVE-2010-4521 for this XSS.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.