[Tickets #14857] Re: Multiple XSS security vulnerabilities

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/14857
------------------------------------------------------------------------------
  Ticket             | 14857
  Updated By         | Git Commit <commits at lists.horde.org>
  Summary            | Multiple XSS security vulnerabilities
  Queue              | Horde Groupware
  Version            | 5.2.22
  Type               | Bug
  State              | Assigned
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             | Michael Rubinsky
------------------------------------------------------------------------------


Git Commit <commits at lists.horde.org> (2018-09-25 16:13) wrote:

Changes have been made in Git (FRAMEWORK_5_2):

commit fb2113bbcd04bd4a28c46aad0889fb0a3979a230
Author: Michael J Rubinsky <mrubinsk at horde.org>
Date:   Tue, 25 Sep 2018 12:12:35 -0400

Bug: 14857

Escape user supplied color data, preventing XSS vuln.

  M lib/View/Sidebar.php

https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230