Tickets :: Comment on [#14926] Horde Webmail - XSS + CSRF to SQLi, RCE, Stealing Emails <= v5.2.22

* Your Email Address
* Spam protection	Enter the letters below: . ..___..___ __ .__ \|_/ _/ [__ / `[ __ \| \./__.[___\__.[_./
Comment	> Thanks for the follow-up. I also asked MITRE and they offered the > following clarification: > >> The stored XSS should be considered part of the CSRF vulnerability >> in CVE-2019-12095, with the CSRF being the primary vulnerability. >> The reflected XSS vectors are all covered by CVE-2019-12094. > > The CVE database entries have been updated as to be more clear.
Attachment
Watch this ticket