Security Notice TBG-0001 XSS vulnerability in issue title fields
An issue was reported in our public issue tracker, 30th May (issue #665) detailing a potential security issue with the way issue title fields are being displayed throughout the system. The issue was confirmed by user Vitality shortly after.
Affected versions:
All The Bug Genie versions up to, and including 3.1RC
Resolution:
This issue has been fixed in version 3.1, released today (15th June, 2011). All users are encouraged to download this version.
Security Notice TBG-0001 XSS vulnerability in issue title fields
Description:An issue was reported in our public issue tracker, 30th May (issue #665) detailing a potential security issue with the way issue title fields are being displayed throughout the system. The issue was confirmed by user Vitality shortly after.
Affected versions:
All The Bug Genie versions up to, and including 3.1RC
Resolution:
This issue has been fixed in version 3.1, released today (15th June, 2011). All users are encouraged to download this version.