Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

gforge: cross-site scripting

Package(s):

gforge

CVE #(s):

CVE-2007-3918

Created:

October 5, 2007

Updated:

October 10, 2007

Description:

It was discovered that a cross site scripting vulnerability in GForge, a collaborative development tool, allows remote attackers to inject arbitrary web script or HTML in the context of a logged in user's session.

Alerts:

Debian

DSA-1383-1

2007-10-04

(Log in to post comments)