Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 6 Dec 2010 16:51:39 -0500 (EST)
From: Josh Bressers <>
Cc: coley <>
Subject: Re: CVE request: vanilla forums before 2.0.10, xss

Use CVE-2010-4264 for the XSS. The commit is here:

As for the "linkbait" issue, I have no clue. Nothing in git seems to
point at that.

Steve, does MITRE have a precedent for such a thing?



----- "Hanno Böck" <> wrote:

> Hi,
> Two sound like security:
> #
> # Added SafeStyles configuration to prevent XSS linkjacking
> # Patched potential linkbait vulnerability in dispatcher
> (although I don't know what a linkbait vulnerability is, maybe someone
> wants 
> to enlighten me)
> -- 
> Hanno Böck                Blog:      
> GPG: 3DBD3B20                Jabber/Mail:
> - professional webhosting

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.