Gentoo Linux Security Advisory GLSA 200511-05 – Steve Kemp reported about two cross-site scripting attacks that are related to the handling of files. Also reported is a directory traversal vulnerability which comes from the attempt to sanitize input paths. Versions less than 2.9.7 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41359/glsa-200511-05.txt
Source: https://packetstormsecurity.com/files/41359/Gentoo-Linux-Security-Advisory-200511-5.html