svn commit: r310957 - head/security/vuxml

Wesley Shields wxs at FreeBSD.org
Fri Jan 25 02:08:57 UTC 2013


Author: wxs
Date: Fri Jan 25 02:08:56 2013
New Revision: 310957
URL: http://svnweb.freebsd.org/changeset/ports/310957

Log:
  Fix whitespace in previous commit.

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml	Fri Jan 25 01:26:37 2013	(r310956)
+++ head/security/vuxml/vuln.xml	Fri Jan 25 02:08:56 2013	(r310957)
@@ -63,12 +63,12 @@ Note:  Please add new entries to the beg
       <body xmlns="http://www.w3.org/1999/xhtml">
 	<p>Cross-site scripting (XSS) vulnerability</p>
 	<blockquote cite="https://www.django-cms.org/en/blog/2012/12/04/2-3-5-security-release/">
-	  <p>Jonas Obrist reports: The security issue 
-allows users with limited admin access to elevate their privileges through XSS
-injection using the page_attribute template tag. Only users with admin access
-and the permission to edit at least one django CMS page object could exploit
-this vulnerability. Websites that do not use the page_attribute template tag are
-not affected.</p>
+	  <p>Jonas Obrist reports: The security issue allows users with limited
+	    admin access to elevate their privileges through XSS injection
+	    using the page_attribute template tag. Only users with admin access
+	    and the permission to edit at least one django CMS page object
+	    could exploit this vulnerability. Websites that do not use the
+	    page_attribute template tag are not affected.</p>
 	</blockquote>
       </body>
     </description>


More information about the svn-ports-head mailing list