oss-security - CVE Request for Drupal contrib modules

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 28 Mar 2013 13:00:04 -0700
From: Forest Monsen <forest.monsen@...il.com>
To: oss-security@...ts.openwall.com
CC: Kurt Seifried <kseifried@...hat.com>
Subject: CVE Request for Drupal contrib modules

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi there,

I'd like to request CVE identifiers for:

SA-CONTRIB-2013-036 - Zero Point - Cross Site Scripting (XSS)
http://drupal.org/node/1954588

SA-CONTRIB-2013-037 - Rules - Cross Site Scripting (XSS)
http://drupal.org/node/1954592

SA-CONTRIB-2013-038 - Commons Groups - Access bypass & Privilege
escalation
http://drupal.org/node/1954764

SA-CONTRIB-2013-039 - Commons Wikis - Access bypass & Privilege escalation
http://drupal.org/node/1954766

Thanks!

Forest
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlFUoTwACgkQ/ILCL9e1Br692wCfQcf0xrflx2tuuLlBWcXD5JXf
l5cAoJQKgACueDVwDIznDqM2vPcKT6MR
=BDK8
-----END PGP SIGNATURE-----

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.