[Tickets #14857] Re: Multiple XSS security vulnerabilities

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/14857
------------------------------------------------------------------------------
  Ticket             | 14857
  Updated By         | apo at debian.org
  Summary            | Multiple XSS security vulnerabilities
  Queue              | Horde Groupware
  Version            | 5.2.22
  Type               | Bug
  State              | Resolved
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             | Michael Rubinsky
------------------------------------------------------------------------------


apo at debian.org (2018-09-30 12:57) wrote:

I have asked the original reporter of CVE-2017-17781 to clarify the  
steps which are needed to produce a SQL injection. If a consensus  
cannot be reached or if he does not reply to this issue again, I will  
ask MITRE to review CVE-2017-17781. They might then either reject the  
issue or mark it as disputed.