diff options
| author | adrianp <adrianp> | 2008-05-06 19:36:39 +0000 |
|---|---|---|
| committer | adrianp <adrianp> | 2008-05-06 19:36:39 +0000 |
| commit | 85dcb6590c63da8a6854dcf3b481419c78d163ae (patch) | |
| tree | 60e075dda9a77e43a6e69db73f52d8f11b8a0a81 /doc | |
| parent | cedf0783989aa5db6ef72c3da521b1ae755d86fe (diff) | |
| download | pkgsrc-85dcb6590c63da8a6854dcf3b481419c78d163ae.tar.gz | |
2.22.4
Class: Cross-Site Scripting
Versions: 2.17.2 and higher
Description: When using the "Format for Printing" view of a bug (or
the "Long Format" of a bug list, which is the same thing),
there was a cross-site scripting hole--arbitrary text
from a particular URL parameter could be injected into the
page without filtering.
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions