Secure testing team - Nov 2011 - Bug#649900: CVE-2011-4344: XSS

Source: libjenkins-winstone-java
Severity: grave
Tags: security

http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2011-11-08.cb

Patch:
https://github.com/jenkinsci/winstone/commit/410ed3001d51c689cf59085b7417466caa2ded7b.patch

Cheers,
        Moritz

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, ''unstable'')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash