svn commit: r310957 - head/security/vuxml
Wesley Shields
wxs at FreeBSD.org
Fri Jan 25 02:08:57 UTC 2013
Author: wxs
Date: Fri Jan 25 02:08:56 2013
New Revision: 310957
URL: http://svnweb.freebsd.org/changeset/ports/310957
Log:
Fix whitespace in previous commit.
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Fri Jan 25 01:26:37 2013 (r310956)
+++ head/security/vuxml/vuln.xml Fri Jan 25 02:08:56 2013 (r310957)
@@ -63,12 +63,12 @@ Note: Please add new entries to the beg
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Cross-site scripting (XSS) vulnerability</p>
<blockquote cite="https://www.django-cms.org/en/blog/2012/12/04/2-3-5-security-release/">
- <p>Jonas Obrist reports: The security issue
-allows users with limited admin access to elevate their privileges through XSS
-injection using the page_attribute template tag. Only users with admin access
-and the permission to edit at least one django CMS page object could exploit
-this vulnerability. Websites that do not use the page_attribute template tag are
-not affected.</p>
+ <p>Jonas Obrist reports: The security issue allows users with limited
+ admin access to elevate their privileges through XSS injection
+ using the page_attribute template tag. Only users with admin access
+ and the permission to edit at least one django CMS page object
+ could exploit this vulnerability. Websites that do not use the
+ page_attribute template tag are not affected.</p>
</blockquote>
</body>
</description>
More information about the svn-ports-head
mailing list