Bug 187162

Summary:	www-apps/drupal XSS and cross-site request forgery vulnerabilities
Product:	Gentoo Security	Reporter:	Matt Fleming (RETIRED) <mjf>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	trivial
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Matt Fleming (RETIRED) gentoo-dev

2007-07-30 18:56:50 UTC

The Drupal Security Team have released two advisories,

1. http://drupal.org/files/sa-2007-017/advisory.txt
2. http://drupal.org/files/sa-2007-018/advisory.txt

The first details a cross-site request forgery vuln that effects drupal 
5.x before 5.2. The second details a XSS vuln that effects drupal 5.x 
before 5.2 and drupal 4.7.x before 4.7.7

Comment 1 Jakub Moc (RETIRED) gentoo-dev

2007-07-30 18:58:22 UTC


*** This bug has been marked as a duplicate of bug 186884 ***