[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 5 Dec 2014 10:56:38 -0500 (EST)
From: cve-assign@...re.org
To: Paul Richards <paul@...tisforge.org>
cc: oss-security@...ts.openwall.com, cve-assign@...re.org
Subject: Re: CVE Request: Multiple XSS vulnerabilities in
MantisBT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
>
>Issue 17816 regarding copy fields -
We assume that you meant to say "Issue 17876" here.
>"Credit: Issue was reported by Mathias Karlsson
>(http://mathiaskarlsson.me) as part of Offensive Security's bug bounty
>program [7]. It was fixed by Paul Richards."
>
>is in correct as the issue was identified by myself initially, then
>subsequently identified (incorrectly) in the initial bug report.
In this case, it is acceptable to assign a different ID to reflect the
different research organizations, since there is not a new release
yet.
Use CVE-2014-9281 [sic] for the copy_field.php issue, originally
incorrectly reported for test_langs.php (bug 17876).
Continue to use CVE-2014-9271 for the file uploads issue (bug 17874).
- ---
CVE assignment team, MITRE CVE Numbering Authority M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEVAwUBVIHVWallVAevmvmsAQJ01Qf+M0C3nKgL1KoDG4+qU6MGXVKmTkS3pNX9
aNfUp2M0gGGjfw3O+SnDMPxVtxQuIVe10HTu48i5TZXL4vKvjNyGIGeuvea3nhPN
BPLX8AYDAEc6W6I7IcpxJzb92Ht4AzucTTPIqFQDl4570wiAUtiYsjHYXGwNUmys
9NIYvAbRkhBd+I6geEx9kNk1zWgoGA970MDxa7IGVopS/K/eOAMOajic7ZiwXDM5
c0JZvakbGK7lntLA6v6i3K/AF2Dc4rTIp6tinJ20WzCVESnnqQRbApICAgVOduu1
wSfwdouDBqxYtTa/O0U0JrjLPqAnFX2HFx9y45aEMOAF6kmK58fXxw==
=VxUZ
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
