oss-security - CVE Request: Magento SWF XSS

Message-ID: <CAHw3cgRASepeWewzjpN2fWLFiAhWdiwBeSBsaYp5oUJBCgAuCA@mail.gmail.com>
Date: Fri, 4 Dec 2015 12:04:17 +0100
From: Ryan Dewhurst <ryandewhurst@...il.com>
To: oss-security@...ts.openwall.com
Subject: CVE Request: Magento SWF XSS

Hi,

I couldn't find a CVE number for the following issue -
http://appcheck-ng.com/unpatched-vulnerabilites-in-magento-e-commerce-platform/

If there is not one please assign one.

I have confirmed this issue on an unknown version of Magento. Not sure in
which version it was patched, if any.

Thanks,
Ryan

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.