Comment 1 for bug 977944
Revision history for this message
| Matthias Weckbecker (mweckbecker) wrote | #1 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
Thanks for your report, jdsn.
In other words this is a Cross-Site Scripting flaw which could be used to steal the session id of the logged in user viewing the logs.
I would recommend getting a CVE for it if this affects released products / software.