[Bug 1276646] New: CVE-2015-5667 perl-HTML-Scrubber: XSS vulnerability when function "comment" is enabled

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1276646

            Bug ID: 1276646
           Summary: CVE-2015-5667 perl-HTML-Scrubber: XSS vulnerability
                    when function "comment" is enabled
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team at redhat.com
          Reporter: amaris at redhat.com
                CC: perl-devel at lists.fedoraproject.org,
                    tcallawa at redhat.com



A cross-site cripting vulnerability was found in HTML::Scrubber Perl module. If
the function "comment" is enabled, an arbitrary script may be executed on the
user's web browser. Affects versions 0.14 and earlier.

Upstream patch:

https://github.com/nigelm/html-scrubber/commit/e1978cc37867e85c06a84a4651745235010cd6cd

-- 
You are receiving this mail because:
You are on the CC list for the bug.