Bug #21462
closed
Bug #21442: Various XSS vulnerabilities in the interface
xss in tags tooltips
Added by Nicolas CHARLES about 2 years ago.
Updated about 1 year ago.
Description
the tooltip of tags is not safe, in rule page and tree, but directives are safe
happens in 6.2 and 7.0; 6.1 has been fixed
- Description updated (diff)
- Target version changed from old 6.1 issues to relocate to 6.2.16
- Status changed from New to In progress
- Assignee set to François ARMAND
- Status changed from In progress to Pending technical review
- Assignee changed from François ARMAND to Nicolas CHARLES
- Pull Request set to https://github.com/Normation/rudder/pull/4392
- Status changed from Pending technical review to Pending release
- Fix check changed from To do to Checked
This bug has been fixed in Rudder 6.2.16, 7.0.5 and 7.1.3 which were released today.
- Status changed from Pending release to Released
- Private changed from Yes to No
Also available in: Atom
PDF