Forums | Mahara Community
Security Announcements
/
Security issue relating to XSS <1.10.9, <15.04.6, <15.10.2
24 March 2016, 11:59
XSS vulnerability due to window.opener (target="_blank" and window.open())
Category: XSS
Severity: High
Versions affected: <1.10.9, <15.04.6, <15.10.2
Reported by: Catalyst security team
Bug reports: https://bugs.launchpad.net/mahara/+bug/1558361
CVE reference: 2017-1000149
Edits to this post:
- Kristina Hoeppner - 07 November 2017, 16:33