DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.
Ticket URL: https://bugs.horde.org/ticket/14857
------------------------------------------------------------------------------
Ticket | 14857
Updated By | Michael Rubinsky <[email protected]>
Summary | Multiple XSS security vulnerabilities
Queue | Horde Groupware
Version | 5.2.22
Type | Bug
-State | Assigned
+State | Resolved
Priority | 3. High
Milestone |
Patch |
Owners | Michael Rubinsky
------------------------------------------------------------------------------
Michael Rubinsky <[email protected]> (2018-09-28 17:04) wrote:
> CVE-2017-17781 was published in another blog post. I missed it myself, sorry.
>
> https://code610.blogspot.com/2017/12/modus-operandi-horde-52x.html
As far as 17781 goes, I can't verify any sql injection vulns. I've
been in contact with the reporter, but have received no information
that suggests there are any sql injection vuln in the areas specified
in CVE-2017-17781.
I consider these issues closed.
--
bugs mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.