Bommels05/Mozilla
Bommels05/Mozilla
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bug 355728: [SECURITY] XSS in the "id" parameter of showdependencygraph.cgi when "doall" is set - Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit a=justdave

Browse Source 
git-svn-id: svn://10.0.0.236/trunk@249382 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
lpsolit%gmail.com 2008-04-04 06:52:34 +00:00
parent 2aa19d2d78
commit bf4abe5bcd
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
mozilla/webtools/bugzilla/docs/en/rel_notes.txt
View File

@ -577,11 +577,10 @@ every login cookie Bugzilla has ever given out.)
Version 2.22.1
--------------
The Bugzilla team fixed two Information Leaks and two Cross-Site
The Bugzilla team fixed two Information Leaks and three Cross-Site
Scripting vulnerabilities that existed in versions of Bugzilla
prior to 2.22.1. None of them are considered to be of critical
severity, but we still strongly recommend that you update any
2.22 installation to 2.22.1.
prior to 2.22.1. We strongly recommend that you update any 2.22
installation to 2.22.1, to be protected from these vulnerabilities.
In addition, we have made an enhancement to security in this version
of Bugzilla. In previous versions, it was possible for malicious