[tor-bugs] #12089 [BridgeDB]: BridgedDB can be forced to email arbitrary email addresses

[Tor Bug Tracker & Wiki]

#12089: BridgedDB can be forced to email arbitrary email addresses
-------------------------+-------------------------------------------------
     Reporter:  isis     |      Owner:  isis
         Type:  defect   |     Status:  reopened
     Priority:  major    |  Milestone:
    Component:           |    Version:
  BridgeDB               |   Keywords:  bridgedb-email, security,
   Resolution:           |  isis2015Q1Q2, isisExB, isisExC
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------
Changes (by isis):

 * priority:  critical => major


--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12089#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online