oss-security - CVE request: XSS in roundcube before 0.8.5

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 7 Feb 2013 18:50:32 +0100
From: Hanno BÃ¶ck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: XSS in roundcube before 0.8.5

Release notes:
http://sourceforge.net/news/?group_id=139281&id=310213

Corresponding bug:
http://trac.roundcube.net/ticket/1488850

Commit:
https://github.com/roundcube/roundcubemail/commit/74cd0a9b62f11bc07c5a1d3ba0098b54883eb0ba

Please assign CVE.

-- 
Hanno Böck		mail/jabber: hanno@...eck.de
GPG: BBB51E42		http://www.hboeck.de/

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.