http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6629

--- Comment #15 from Chris Cormack <[email protected]> 2011-11-25 
08:42:18 UTC ---
It turns out, master is not vulnerable, nor is the 3.6.x branch, but the patch
should be applied anyway. Its a more elegant solution to checking the cookie.

But 3.2.x and 3.4.x are vulnerable

-- 
Configure bugmail: 
http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA Contact for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to