[Tickets #6399] Re: Unsanitized theme include vulnerability

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/6399
-----------------------------------------------------------------------
 Ticket             | 6399
 Updated By         | Chuck Hagenbuch <chuck at horde.org>
 Summary            | Unsanitized theme include vulnerability
 Queue              | Horde Framework Packages
 Version            | FRAMEWORK_3
 Type               | Bug
 State              | Unconfirmed
 Priority           | 3. High
 Milestone          | 
 Patch              | 
 Owners             | 
-----------------------------------------------------------------------


Chuck Hagenbuch <chuck at horde.org> (2008-03-07 16:50) wrote:

That's because the vulnerability is bogus, the "fix" is wrong, and the
people who "reported" it did not give us time (even a day) to respond, and
have continued to ignore our response to them.