Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

One persistent and one reflected XSS #10795

Closed
erhan- opened this issue May 17, 2018 · 1 comment
Closed

One persistent and one reflected XSS #10795

erhan- opened this issue May 17, 2018 · 1 comment
Assignees
@Hudell
Milestone
0.66.0

Comments

@erhan-
Copy link
Contributor

erhan- commented May 17, 2018 •
edited
Loading

Hey guys,
I already created a PR for the persistent XSS: #10793

There is another one which is not as critical. When you create an account, the next step will ask for a username. This field will not save HTML control characters but you will receive an error which shows the attempted username unescaped.

Nothing critical but it is there.
@kaiiiiiiiii kaiiiiiiiii mentioned this issue May 20, 2018
Merged
@engelgabriel engelgabriel added this to the 0.66.0 milestone Jun 4, 2018
@erhan-
Copy link
Contributor Author

erhan- commented Jul 11, 2018

Following CVE was assigned: CVE-2018-13879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13879

@erhan- erhan- mentioned this issue Jun 6, 2019
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Hudell Hudell

Labels
None yet
Projects
None yet
Milestone
0.66.0
Development

No branches or pull requests
3 participants
@engelgabriel @Hudell @erhan-