6.0.0-beta1
▾
Tasks
New Task
Search
Photos
Wiki
▾
Tickets
New Ticket
Search
dev.horde.org
Toggle Alerts Log
Help
7/26/25
H
istory
A
ttachments
C
omment
W
atch
Download
Comment on [#14213] Reflected Cross-Site Scripting (XSS)
*
Your Email Address
*
Spam protection
Enter the letters below:
.._.\ /. , __ | | >< \./ / ` \__|_|_/ \ | \__.
Comment
>> Horde groupware and webmail bundles changelogs mention "Fixed XSS >> vulnerabilities in menu bar and form renderer.". >> >> Is this this only commit, or are they others? > > OK. Got it, it's "XSS in Horde_Core_VarRenderer_Html". > > This is currently hard to dig thru the changelogs to get security > patches. Why not using CVEs and traditionnal embargoed patches?
Attachment
Watch this ticket
N
ew Ticket
M
y Tickets
S
earch
Q
uery Builder
R
eports
Saved Queries
Open Bugs
Bugs waiting for Feedback
Open Bugs in Releases
Open Enhancements
Enhancements waiting for Feedback
Bugs with Patches
Enhancements with Patches
Release Showstoppers
Stalled Tickets
New Tickets
Horde 5 Showstoppers