378803 – (CVE-2011-2711) www-apps/cgit: XSS vulnerability in rename hint (CVE-2011-2711)

Bug 378803 (CVE-2011-2711) - www-apps/cgit: XSS vulnerability in rename hint (CVE-2011-2711)

Summary: www-apps/cgit: XSS vulnerability in rename hint (CVE-2011-2711)

Status:	RESOLVED FIXED

Alias:	CVE-2011-2711

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal trivial (vote)
Assignee:	Gentoo Security

URL:	http://secunia.com/advisories/45358
Whiteboard:	~4 [noglsa]
Keywords:

Duplicates (1):	386251 (view as bug list)
Depends on:
Blocks:

Attachments
fix xss, remove old (cgit.patch,10.27 KB, patch) 2011-09-09 19:04 UTC, Nikoli	no flags	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Agostino Sarubbo gentoo-dev

2011-08-11 16:42:47 UTC

More info at $URL

Comment 1 Tim Sammut (RETIRED) gentoo-dev

2011-08-20 03:14:26 UTC

Looks like a patch may be at $URL too.

Comment 2 Nikoli 2011-09-09 19:04:17 UTC

Created attachment 285991 [details, diff]
fix xss, remove old

pva, please commit patch.

Comment 3 Peter Volkov (RETIRED) gentoo-dev

2011-09-11 11:39:00 UTC

Patch commited. No stable existed. 
@security: Bug fixed.

Comment 4 Agostino Sarubbo gentoo-dev

2011-09-11 11:43:36 UTC

Thanks Nikoli and Peter.

Closed as [noglsa].

Comment 5 Nikoli 2012-06-08 13:45:40 UTC

*** Bug 386251 has been marked as a duplicate of this bug. ***