1 files changed, 2 insertions, 0 deletions
diff --git a/attachment.cgi b/attachment.cgi
index 5996aa86d..368ad702e 100755
--- a/attachment.cgi
+++ b/attachment.cgi
@@ -257,6 +257,8 @@ sub validateStatuses
       || DisplayError("One of the statuses you entered is not a valid status
                        for this attachment.")
         && exit;
+    # We have tested that the status is valid, so it can be detainted
+    detaint_natural($status);
   }
 }