Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 15 Sep 2015 12:57:05 +0200
From: Martin Prpic <mprpic@...hat.com>
To: "oss security list" <oss-security@...ts.openwall.com>
Subject: CVE-2015-6584: XSS in DataTables

Hi,

CVE-2015-6584 was assigned to a cross-site scripting flaw in DataTables:

https://www.netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6584

Any pointers on which commit fixes this issue? The advisory linked above
only mentions it was fixed in 1.10.9, but the changelog for that version
does not mention the CVE, or any change that looks like XSS for that
matter.

https://cdn.datatables.net/1.10.9/
https://github.com/DataTables/DataTables/commits/master

Thanks!

-- 
Martin Prpič / Red Hat Product Security

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ