[Dotclear Dev] Fwd: Fwd: [oss-security] Re: CVE Request: Dotclear: XSS vulnerability in comments managment page and media exclusion control enforcement

C'est passé en spam chez moi, l'avez-vous vu ? ---------- Forwarded message ---------- From: Aymeric (APLU) <dotclear(a)mulx.net&gt; Date: 2016-03-07 11:22 GMT+01:00 Subject: [Dotclear Dev] Fwd: [oss-security] Re: CVE Request: Dotclear: XSS vulnerability in comments managment page and media exclusion control enforcement To: dev(a)list.dotclear.org Bonjour, Pour information, deux CVE ont été affecté à Dotclear pour des correctifs sécurité effectués en 2.8.2. Aymeric. -------- Original Message -------- Subject: [oss-security] Re: CVE Request: Dotclear: XSS vulnerability in comments managment page and media exclusion control enforcement Date: 2016-03-07 04:04 From: cve-assign(a)mitre.org To: carnil(a)debian.org Cc: cve-assign(a)mitre.org, oss-security(a)lists.openwall.com Reply-To: oss-security(a)lists.openwall.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dotclear, a web publishing software, fixed a cross-site scripting The XSS vulnerability was fixed with Use CVE-2015-8831. The second mentioned issue was addressed with Use CVE-2015-8832. - -- CVE Assignment Team M/S M300, 202 Burlington Road, Bedford, MA 01730 USA [ A PGP key is available for encrypted communications at http://cve.mitre.org/cve/request_id.html ] -- Dev mailing list - Dev(a)list.dotclear.org - http://ml.dotclear.org/listinfo/dev