tocsin

Debian/ldap-account-manager: medium 6.1

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.

Action: Upgrade ldap-account-manager to 3.6-2 or later.

Affected

introducedfixedlast affected
03.6-2-

Fixed versions

3.6-2

Sources

published · modified · JSON