10:58 a.m.
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238722
Summary: CVE-2007-2423: moin <= 1.5.7 XSS
Product: Fedora Extras
Version: fc6
Platform: All
URL: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2423
OS/Version: Linux
Status: NEW
Severity: medium
Priority: medium
Component: moin
AssignedTo: matthias(a)rpmforge.net
ReportedBy: ville.skytta(a)iki.fi
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-security-list(a)redhat.com
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2423
"Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows
remote attackers to inject arbitrary web script or HTML via the do parameter in
an AttachFile action, a different vulnerability than CVE-2007-0857."
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
7:58 a.m.
New subject: [Bug 238722] CVE-2007-2423: moin <= 1.5.7 XSS
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: CVE-2007-2423: moin <= 1.5.7 XSS
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238722
------- Additional Comments From matthias(a)rpmforge.net 2007-05-04 08:58 EST -------
And once again, no patch to be found anywhere... not to mention half the reports
mentionning "PHP" or "index.php" vulnerability... *sigh*
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
8:13 a.m.
New subject: [Bug 238722] CVE-2007-2423: moin <= 1.5.7 XSS
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: CVE-2007-2423: moin <= 1.5.7 XSS
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238722
matthias(a)rpmforge.net changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution| |CURRENTRELEASE
Fixed In Version| |1.5.7-2
------- Additional Comments From matthias(a)rpmforge.net 2007-05-07 09:13 EST -------
Debian has a really great MoinMoin package, and seems to track upstream really
closely.
I've reviewed, included and tested 4 security patches from Debian, which should
fix CVE-2007-0857, CVE-2007-0901, CVE-2007-0902 and CVE-2007-2423 (and other
security bugs too).
I've updated F7,6,5 and EL5,4 branches (all current).
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
6208
days inactive
6213
days old
security@lists.fedoraproject.org
2 comments
1 participants
participants (1)
-
Red Hat Bugzilla