tocsin

Debian/php-horde-core: medium 6.1

Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webm

Action: Upgrade php-horde-core to 2.22.4+debian0-1 or later.

Affected

introducedfixedlast affected
02.22.4+debian0-1-

Fixed versions

2.22.4+debian0-1

Sources

published · modified · JSON