[Tickets #14857] Re: Multiple XSS security vulnerabilities

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/14857
------------------------------------------------------------------------------
  Ticket             | 14857
  Updated By         | Git Commit <commits at lists.horde.org>
  Summary            | Multiple XSS security vulnerabilities
  Queue              | Horde Groupware
  Version            | 5.2.22
  Type               | Bug
  State              | Assigned
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             | Michael Rubinsky
------------------------------------------------------------------------------


Git Commit <commits at lists.horde.org> (2018-09-25 16:16) wrote:

Changes have been made in Git (FRAMEWORK_5_2):

commit 09d90141292f9ec516a7a2007bf828ce2bbdf60d
Author: Michael J Rubinsky <mrubinsk at horde.org>
Date:   Tue, 25 Sep 2018 12:15:27 -0400

Bug: 14857

Prevent XSS in event's URL field.

  M lib/Event.php

https://github.com/horde/kronolith/commit/09d90141292f9ec516a7a2007bf828ce2bbdf60d