https://bugzilla.redhat.com/show_bug.cgi?id=1276646 Bug ID: 1276646 Summary: CVE-2015-5667 perl-HTML-Scrubber: XSS vulnerability when function "comment" is enabled Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@xxxxxxxxxx Reporter: amaris@xxxxxxxxxx CC: perl-devel@xxxxxxxxxxxxxxxxxxxxxxx, tcallawa@xxxxxxxxxx A cross-site cripting vulnerability was found in HTML::Scrubber Perl module. If the function "comment" is enabled, an arbitrary script may be executed on the user's web browser. Affects versions 0.14 and earlier. Upstream patch: https://github.com/nigelm/html-scrubber/commit/e1978cc37867e85c06a84a4651745235010cd6cd -- You are receiving this mail because: You are on the CC list for the bug. -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/perl-devel
