Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

multiple XSS found in refinery CMS #3097

Closed
cor3sm4sh3r opened this issue Feb 5, 2016 · 2 comments · Fixed by #3117
Closed

multiple XSS found in refinery CMS #3097

cor3sm4sh3r opened this issue Feb 5, 2016 · 2 comments · Fixed by #3117
Assignees
@bricesanchez
Labels
3-0-stable Accepted

Comments

@cor3sm4sh3r
Copy link

for more information about the vulnerabilities

contact me cor3sm4sh3r@gmail.com
@bricesanchez
Copy link
Member

Hello @cor3sm4sh3r,

Thanks for reporting!

Could you join us on Gitter : https://gitter.im/refinery/refinerycms ?

We will be able to chat privately in order to reproduce the vunerabilities and find a fix.

@bricesanchez bricesanchez self-assigned this Feb 5, 2016
@parndt
Copy link
Member

parndt commented Feb 11, 2016

Thanks!

@parndt parndt closed this as completed Feb 11, 2016
parndt added a commit that referenced this issue Mar 5, 2016
@parndt
Merge pull request #3117 from refinery/bugfix/3097
9f4c336 
Bugfix #3097
@bricesanchez bricesanchez mentioned this issue Mar 18, 2016
Merged
stefanspicer added a commit to stefanspicer/refinerycms that referenced this issue Mar 28, 2016
@stefanspicer
Use tag helper for refinery meta
b197c3d 
This change was lost in a rebase (this html changed files)
It is from:
 - commit: 5645295
 - PR: refinery#3117
 - Bugfix: refinery#3097
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bricesanchez bricesanchez

Labels
3-0-stable Accepted
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

XSS Bugfix #3097 - Sanitize SectionPresenter refinery/refinerycms
3 participants
@parndt @bricesanchez @cor3sm4sh3r