751254 - hacks.mozilla.org - SWFUpload Vulnerable Version

Status: RESOLVED DUPLICATE of bug 751259

(Developer Engagement :: Mozilla Hacks, task)

Description

[Artur]

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:10.0) Gecko/20100101 Firefox/10.0
Build ID: 20120129021758

Steps to reproduce:

Hello,

I wanna to report a bug in site mpl.mozilla.org (Wordpress 3.3.1).
About bug we can read, for example here:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=0


Actual results:

Location of vulnerable:
http://hacks.mozilla.org/wp-includes/js/swfupload/swfupload.swf


---
Impact Type:Allows unauthorized disclosure of information; Allows unauthorized modification; Allows disruption of service 
---



Expected results:

For fix this vulnerability script must be updated for Wordpress 3.3.2

Comment 1

[Artur]

This is a working link for nist.gov:
http://web.nvd.nist.gov/view/vuln/detail? vulnId=CVE-2012-2399


===================
Btw. Does this issue includes the program: http://www.mozilla.org/security/bug-bounty.html ?

Thanks for reply.
Best Regards

Comment 3

[Will Kahn-Greene [:willkg] ET needinfo? me]

For bugs that are resolved, we remove the security flag. These haven't had their flag removed, so I'm removing it now.