Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 26 May 2015 15:21:20 -0400 (EDT)
From: cve-assign@...re.org
To: 0pc0defr@...il.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE Request for WP Fastest Cache plugin

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> CSRF vulnerability was found in WP Fastest Cache 0.8.3.4 plugin.
> 
> The vuln is found in admin.php:

> $this->saveOption();
> $this->deleteCache();
> $this->deleteCssAndJsCache();
> $this->addCacheTimeout();

Use CVE-2015-4089.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJVZMdTAAoJEKllVAevmvms0mcIAIQ3YiRYDVzMQ4yRzaVcJUjf
VsH+cPTThrOU8OOLPsnYccFeyrBciiz4XUtX4AQX2tIF1DCK0+QL+UB32pdYnLLl
zwHLMOS2dpT7tsRoIkVYDb9cZxFCbZ4FCv5RLlaj2nHo57YyhVrNUmqsaNzmfJlb
Wd6Tot38eiMjFJnQxyUwAVHGwh5vJkZeJSqc8jauLJIZZn9qa8NcuB51BtZqiQ9/
B1Z1vi1HJpMqvrqeyA3cDGCF5zA2oBNbPfLYjTKfTbEC2FKy8NjEJYYmR9s4Jc87
AJ26GrIX41skoJMnnxvvMBCABE2x5z3KEOWsJmS0xzJehJHOppMZ/UtKYwdH81w=
=taMN
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.