Bug 6518 - XSS vulnerabilities in the OPAC
Summary: XSS vulnerabilities in the OPAC
Status: CLOSED FIXED
Alias: None
Product: Koha
Classification: Unclassified
Component: OPAC (show other bugs)
Version: master
Hardware: All All
: PATCH-Sent (DO NOT USE) blocker (vote)
Assignee: Owen Leonard
QA Contact: Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-19 10:04 UTC by Chris Cormack
Modified: 2019-06-27 09:24 UTC (History)
2 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments
Bug 6518 : XSS errors (6.33 KB, patch)
2011-06-19 10:04 UTC, Chris Cormack
Details | Diff | Splinter Review
Bug 6518 : Fixing XSS issues on opac (5.71 KB, patch)
2011-06-19 10:05 UTC, Chris Cormack
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Cormack 2011-06-19 10:04:05 UTC
Positive Technologies Research Team detects XSS in Koha Library Software.

The vulnerability was detected by Yuri Goltsev, Positive Technologies Research Lab
Comment 1 Chris Cormack 2011-06-19 10:04:54 UTC
Created attachment 4503 [details] [review]
Bug 6518 : XSS errors
Comment 2 Chris Cormack 2011-06-19 10:05:45 UTC
Created attachment 4504 [details] [review]
Bug 6518 : Fixing XSS issues on opac