A deficiency was found in the way Roundup, simple and flexible issue-tracking
system, processed PageTemplate templates for named pages. A remote attacker
could use this flaw to conduct cross-site scripting (XSS) attacks by tricking
a local, authenticated user into visiting a specially-crafted web page.
This issue affects the versions of the roundup package, as shipped
with Fedora releases of 12 and 13.
This issue affects the versions of the roundup package, as present
within EPEL-4 and EPEL-5 repositories.
Created roundup tracking bugs for this issue
Affects: fedora-all [bug 610867]
roundup-1.4.13-2.el5 has been pushed to the Fedora EPEL 5 stable repository. If problems still persist, please make note of it in this bug report.
roundup-1.4.13-2.el4 has been pushed to the Fedora EPEL 4 stable repository. If problems still persist, please make note of it in this bug report.
The CVE identifier of CVE-2010-2491 has been assigned to this: