CVE-2017-15214

概要

参考情報

• openwall.com/lists/oss-security/2017/10/07/1 · Mailing List
• Flyspray/flyspray commit 00cfae5 · Patch
• Flyspray/flyspray release v1.0-rc6 · Release Notes

flyspray のその他の脆弱性

• CVE-2017-15213中 5.4Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via …
• CVE-2012-1058中 6.0Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for reque…
• CVE-2008-1166中 5.0Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to …
• CVE-2008-1165中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script …
• CVE-2007-6461中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrar…