Back to bug 37654

Who When What Removed Added
phil 2024-08-15 21:01:03 UTC Attachment #170412 Attachment mime type text/html application/marc
dcook 2024-08-16 01:11:49 UTC CC dcook, didier.gautheron, fridolin.somers, jonathan.druart, katrin.fischer, laurent.ducos, lisette, lucas, m.de.rooy, martin.renvoize, nick, philippe.blouin, tomascohen
Product Koha Koha security
Group Koha security
Assignee koha-bugs chris
QA Contact testopia
Version Main unspecified
Component Tools Koha
Summary Batch record import needs to HTML-escape the Citation column XSS in Batch record import for the Citation column
phil 2024-08-16 03:03:50 UTC Attachment #170412 Attachment is obsolete 0 1
Status NEW ASSIGNED
Assignee chris phil
phil 2024-08-16 03:10:42 UTC Status ASSIGNED Needs Signoff
dcook 2024-08-16 03:22:22 UTC QA Contact dcook
phil 2024-08-16 15:48:13 UTC Attachment #170419 Attachment is obsolete 0 1
phil 2024-08-16 15:49:16 UTC Comment 4 Tag obsolete
dcook 2024-08-21 05:24:07 UTC Status Needs Signoff Signed Off
dcook 2024-08-21 05:24:10 UTC Attachment #170457 Attachment is obsolete 0 1
martin.renvoize 2024-08-21 07:26:43 UTC Attachment #170517 Attachment is obsolete 0 1
martin.renvoize 2024-08-21 07:28:33 UTC Status Signed Off Passed QA
wainuiwitikapark 2024-09-11 05:25:38 UTC CC wainuiwitikapark
lucas 2024-10-09 14:34:52 UTC Text to go in the release notes 24.05.04
katrin.fischer 2024-10-18 09:29:44 UTC Group Koha security
Text to go in the release notes 24.05.04 24.05.04,23.11.09,23.05.15
Component Koha Tools
Product Koha security Koha
Summary XSS in Batch record import for the Citation column XSS in batch record import for the citation column
katrin.fischer 2024-10-18 10:17:15 UTC Version(s) released in 24.11.00
Status Passed QA Pushed to main
katrin.fischer 2024-10-18 10:18:03 UTC Version(s) released in 24.11.00 24.11.00,24.05.04,23.11.09,23.05.15
katrin.fischer 2024-10-18 10:20:22 UTC Status Pushed to main Pushed to stable
katrin.fischer 2024-10-18 10:20:28 UTC Status Pushed to stable Pushed to oldstable
katrin.fischer 2024-10-18 10:20:33 UTC Status Pushed to oldstable Pushed to oldoldstable
fridolin.somers 2024-10-21 13:01:22 UTC Text to go in the release notes 24.05.04,23.11.09,23.05.15
phil 2024-12-18 20:41:27 UTC Keywords rel_22_11_candidate
jesse 2025-03-31 09:51:12 UTC CC jesse
Status Pushed to oldoldstable Pushed to oldoldoldstable

Back to bug 37654