Bug 701716 (CVE-2011-1841) - CVE-2011-1841 perl-Mojolicious: XSS vulnerability in link_to helper
Summary: CVE-2011-1841 perl-Mojolicious: XSS vulnerability in link_to helper
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2011-1841
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 701718 701719
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-05-03 16:23 UTC by Vincent Danen
Modified: 2021-10-19 21:49 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-10-19 21:49:01 UTC
Embargoed:

Attachments (Terms of Use)

Description Vincent Danen 2011-05-03 16:23:46 UTC 
Common Vulnerabilities and Exposures assigned an identifier CVE-2011-1841 to
the following vulnerability:

Name: CVE-2011-1841
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1841
Assigned: 20110502
Reference: http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.20/Changes

Cross-site scripting (XSS) vulnerability in the link_to helper in
Mojolicious before 1.12 allows remote attackers to inject arbitrary
web script or HTML via unspecified vectors.
Comment 1 Vincent Danen 2011-05-03 16:24:29 UTC 
The upstream commit is here:

https://github.com/kraih/mojo/commit/f6801ef7be8c78092e38f870b19fae3da0899d60#lib/Mojolicious/Plugin/TagHelpers.pm
Comment 2 Vincent Danen 2011-05-03 16:27:36 UTC 
Created perl-Mojolicious tracking bugs for this issue

Affects: fedora-13 [bug 701718]
Affects: fedora-14 [bug 701719]
Note You need to log in before you can comment on or make changes to this bug.