Debian/gosa: medium 6.1
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in inj
Action: Upgrade gosa to 2.7.4+reloaded3-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.4+reloaded3-5 | - |
Fixed versions
| 2.7.4+reloaded3-5 |
Sources
- osv: DEBIAN-CVE-2018-1000528#Debian:13/gosa
- https://security-tracker.debian.org/tracker/CVE-2018-1000528
published · modified · JSON