[Tickets #14857] Re: Multiple XSS security vulnerabilities

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/14857
------------------------------------------------------------------------------
  Ticket             | 14857
  Updated By         | Git Commit <commits at lists.horde.org>
  Summary            | Multiple XSS security vulnerabilities
  Queue              | Horde Groupware
  Version            | 5.2.22
  Type               | Bug
  State              | Assigned
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             | Michael Rubinsky
------------------------------------------------------------------------------


Git Commit <commits at lists.horde.org> (2018-09-26 00:23) wrote:

Changes have been made in Git (FRAMEWORK_5_2):

commit 39f740068ad21618f6f70b6e37855c61cadbd716
Author: Michael J Rubinsky <mrubinsk at horde.org>
Date:   Tue, 25 Sep 2018 20:21:56 -0400

Bug: 14857

Escape user-provided resource name when outputting. Prevents XSS vuln.

  M js/kronolith.js

https://github.com/horde/kronolith/commit/39f740068ad21618f6f70b6e37855c61cadbd716