[Secure-testing-commits] r32413 - data/CVE

[Paul Wise]

Author: pabs
Date: 2015-02-22 14:14:28 +0000 (Sun, 22 Feb 2015)
New Revision: 32413

Modified:
   data/CVE/list
Log:
new redmine xss issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-22 12:51:34 UTC (rev 32412)
+++ data/CVE/list	2015-02-22 14:14:28 UTC (rev 32413)
@@ -1,3 +1,8 @@
+CVE-2015-XXXX [Potential XSS vulnerability when rendering some flash messages]
+	- redmine <unfixed>
+	NOTE: https://www.redmine.org/projects/redmine/wiki/Changelog_2_6
+	NOTE: https://www.redmine.org/projects/redmine/wiki/Security_Advisories
+	NOTE: https://www.redmine.org/issues/19117 (private)
 CVE-2005-XXXX [more related to CVE-2005-4890]
 	- shadow <unfixed> (unimportant; bug #628843)
 	NOTE: only affects the su executable, so if you use sudo you're not affected