cgit -- multiple vulnerabilities

2016-01-14T00:00:00
ID 62C0DBBD-BFCE-11E5-B5FE-002590263BF5
Type freebsd
Reporter FreeBSD
Modified 2016-01-14T00:00:00

Description

Jason A. Donenfeld reports:

Reflected Cross Site Scripting and Header Injection in Mimetype Query String. Stored Cross Site Scripting and Header Injection in Filename Parameter. Integer Overflow resulting in Buffer Overflow.