Filed Under (News, WordPress) by DK on 3 October 2007

The guys at Google have been great and have just released a brand new version of FeedSmith Feedburner (v2.3), after BlogSecurity released an advisory yesterday that allowed an attacker to hijack your feed and thereby your readers.

This does address the vulnerability released on BlogSecurity yesterday.

A random token has been added to the form to prevent CSRF attacks, and after a quick test it seems to work well, however, we have not analysed it in detail as yet.

We suggest you upgrade as soon as possible.

The updated plugin can be downloaded at: http://www.feedburner.com/fb/a/help/wordpress_quickstart

Read and Contribute to BlogSec News!

Comments

[…] Update: 03/10/07: Fixed version released. […]


[…] read about a Feedburner problem recently–apparently it may be possible that anyone using the Feedsmith plugin (one which […]


Comment
Name:
Email:
Website:
Message: