Vulnerability In BEdita CMS

[Edric Teo Jin Kai]

Hi,

I have discovered a vulnerability in BEdita, may I know how should I contact the security team? Or should I create a new issue via github bug tracker?

Best regards,
Edric Teo

[bato]

Hi Edric Teo,

thank you for contact us and help to discover issues in BEdita.

Please, feel free to create new issue on github https://github.com/bedita/bedita/issues specifying the BEdita version and how to reproduce the vulnerability.

Greetings

Alberto

[Edric Teo Jin Kai]

Hi Alberto,

I have drafted a proof-of-concept exploiting the vulnerability in a pdf file. However github doesn't allow the uploading of a pdf file.

Is it possible for me to email you the POC?

Thanks

Best regards,
Edric Teo

[Stefano Rosanelli]

Hi Edric,

thanks on behalf of the BEdita dev team for your detailed proof-of-concept.
We are already working to solve those issues.

ciao
Stefano

[Edric Teo Jin Kai]

Hi Stefano,

Thank you for your response. It is my pleasure to be working with the developers of BEdita.

Could you please update me after the fixes are made so that I could request for CVE IDs for the respective vulnerability.

Thanks.

Best regards,
Edric Teo

--
You received this message because you are subscribed to a topic in the Google Groups "BEdita" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/bedita/2b_o3K1BbhQ/unsubscribe.
To unsubscribe from this group and all its topics, send an email to bedita+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Alberto Pagliarini]

Hi Edric Teo,

we have opened two issues about vulnerabilities reported by you:

https://github.com/bedita/bedita/issues/591

https://github.com/bedita/bedita/issues/597

The first one is already closed while the second is in test status and soon it will be closed too.

The patches are on 3-corylus branch and soon as possible a 3.5.1 version will be released.

Thanks again for your help to improve BEdita!

ciao

Alberto

You received this message because you are subscribed to the Google Groups "BEdita" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bedita+un...@googlegroups.com.

[bato]

Hi Edric Teo,

3.5.1 release is landed!! https://groups.google.com/forum/?fromgroups#!topic/bedita/SOYrl5C-YRg

Thank you very much for your contribute!

Alberto

[Edric Teo Jin Kai]

Hi Alberto,

Thank you for informing on the new release of BEdita CMS.

It was a great pleasure working with you.

Have a nice day! :)

--

You received this message because you are subscribed to a topic in the Google Groups "BEdita" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/bedita/2b_o3K1BbhQ/unsubscribe.

To unsubscribe from this group and all its topics, send an email to bedita+un...@googlegroups.com.