Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 21 Jul 2014 10:00:07 -0400 (EDT)
From: cve-assign@...re.org
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: Re: Moodle security notifications public

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>> MSA-14-0029: Cross-site scripting vulnerability in exception dialogues

>> CVE identifier:    CVE-2014-354

> What is the correct CVE ID for the
> https://moodle.org/mod/forum/discuss.php?d=264270 page? CVE-2014-354
> is malformed.

We're not sure why the reply to this message didn't have a Cc to the
oss-security list, but (in any case) the correct CVE ID for a publicly
known vulnerability isn't private information, so we can directly
forward the ID here.

CVE-2014-3548 is correct, and
https://moodle.org/mod/forum/discuss.php?d=264270 has been updated.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJTzRxwAAoJEKllVAevmvmsedwH/RXmxlVNMjeb4jlFJ/pEqfEW
JDoHvNAajBTZHOAyWhfVEHG1OdMUWtY8FvMtRqV1Yu5+Lhiyatm61860I1X/+4Bm
SPFaAHp+J/U67VWLra+u+E64usAUAKRIb8Nkhm0XrM70D7oBUX8zny4dXC/nc7gC
f2Eb2WPFYcWWKs8cM/gPeQv0gJotAO+ethPeiwZM+E7qRTuxu1Bny/j4d5f+BrAn
3g8ci3lCIrzKz6ulmYsxh9yEMYxlIH8awDTGRX31HryUGNFbGEr0rIY5gT2ETMlF
nCWuphKaAyI20LkUywbi+++w2KNzeUJxLwI7ZUOpp7PmwEfIYRVOF5ALxRO9Ib0=
=x+Vl
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.