You are here: Foswiki>Tasks Web>Component>NatEditPlugin>Item15200 (06 Aug 2023, MichaelDaum)Edit Attach

Item15200: possible XSS vulnerability in topic title field

pencil
Priority: Security
Current State: Closed
Released In: 2.1.8
Target Release: patch
Applies To: Extension
Component: NatEditPlugin
Branches: Release02x01
Reported By: MichaelDaum
Waiting For:
Last Change By: MichaelDaum
It failed to check for TopicTitlePlugin enabled and was failing to encode quotes properly

-- MichaelDaum - 11 Jul 2023

 

ItemTemplate edit

Summary possible XSS vulnerability in topic title field
ReportedBy MichaelDaum
Codebase
SVN Range
AppliesTo Extension
Component NatEditPlugin
Priority Security
CurrentState Closed
WaitingFor
Checkins distro:270078855952
TargetRelease patch
ReleasedIn 2.1.8
CheckinsOnBranches Release02x01
trunkCheckins
masterCheckins
ItemBranchCheckins
Release02x01Checkins distro:270078855952
Release02x00Checkins
Release01x01Checkins
Edit  | Attach | Print version | History: r2 < r1 | Backlinks | View wiki text | Edit wiki text | More topic actions
Topic revision: r2 - 06 Aug 2023, MichaelDaum
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy