https://bugzilla.redhat.com/show_bug.cgi?id=1276646
Bug ID: 1276646
Summary: CVE-2015-5667 perl-HTML-Scrubber: XSS vulnerability
when function "comment" is enabled
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected],
[email protected]
A cross-site cripting vulnerability was found in HTML::Scrubber Perl module. If
the function "comment" is enabled, an arbitrary script may be executed on the
user's web browser. Affects versions 0.14 and earlier.
Upstream patch:
https://github.com/nigelm/html-scrubber/commit/e1978cc37867e85c06a84a4651745235010cd6cd
--
You are receiving this mail because:
You are on the CC list for the bug.
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/perl-devel
