Date: Tue, 4 Jan 2011 13:27:09 -0500 (EST) From: Josh Bressers <bressers@...hat.com> To: oss-security@...ts.openwall.com Cc: jmw@...ian.org, coley <coley@...re.org> Subject: Re: (possible) CVE request: Clickjacking in Mediawiki ----- Original Message ----- > Hi, > > Mediawiki <= 1.16 is vulnerable to clickjacking when showing iframes > in a > wiki: > > https://bugzilla.wikimedia.org/show_bug.cgi?id=26561 > > I don't know if this warrants a CVE ID, but if so please assign one. > Please use CVE-2011-0003 Thanks. -- JB
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ