Date: Fri, 5 Dec 2014 10:56:38 -0500 (EST) From: cve-assign@...re.org To: Paul Richards <paul@...tisforge.org> cc: oss-security@...ts.openwall.com, cve-assign@...re.org Subject: Re: CVE Request: Multiple XSS vulnerabilities in MantisBT -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >Issue 17816 regarding copy fields - We assume that you meant to say "Issue 17876" here. >"Credit: Issue was reported by Mathias Karlsson >(http://mathiaskarlsson.me) as part of Offensive Security's bug bounty >program . It was fixed by Paul Richards." > >is in correct as the issue was identified by myself initially, then >subsequently identified (incorrectly) in the initial bug report. In this case, it is acceptable to assign a different ID to reflect the different research organizations, since there is not a new release yet. Use CVE-2014-9281 [sic] for the copy_field.php issue, originally incorrectly reported for test_langs.php (bug 17876). Continue to use CVE-2014-9271 for the file uploads issue (bug 17874). - --- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEVAwUBVIHVWallVAevmvmsAQJ01Qf+M0C3nKgL1KoDG4+qU6MGXVKmTkS3pNX9 aNfUp2M0gGGjfw3O+SnDMPxVtxQuIVe10HTu48i5TZXL4vKvjNyGIGeuvea3nhPN BPLX8AYDAEc6W6I7IcpxJzb92Ht4AzucTTPIqFQDl4570wiAUtiYsjHYXGwNUmys 9NIYvAbRkhBd+I6geEx9kNk1zWgoGA970MDxa7IGVopS/K/eOAMOajic7ZiwXDM5 c0JZvakbGK7lntLA6v6i3K/AF2Dc4rTIp6tinJ20WzCVESnnqQRbApICAgVOduu1 wSfwdouDBqxYtTa/O0U0JrjLPqAnFX2HFx9y45aEMOAF6kmK58fXxw== =VxUZ -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.