diff options
| author | thierry <thierry@FreeBSD.org> | 2010-09-29 01:48:19 +0800 |
|---|---|---|
| committer | thierry <thierry@FreeBSD.org> | 2010-09-29 01:48:19 +0800 |
| commit | 569002c5051c960b0ff2837ebfb23b488f55ad7b (patch) | |
| tree | a8901d41f5a51a54e3b3b1fa8d51f30c989299e3 /security | |
| parent | 65e0e66a3d06fbfc1e22dab06fdde939e3239f0e (diff) | |
| download | freebsd-ports-gnome-569002c5051c960b0ff2837ebfb23b488f55ad7b.tar.gz freebsd-ports-gnome-569002c5051c960b0ff2837ebfb23b488f55ad7b.tar.zst freebsd-ports-gnome-569002c5051c960b0ff2837ebfb23b488f55ad7b.zip | |
Report a XSS vulnerability in mail/horde-dimp.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index d85aed6ece3d..32357ffd1b2e 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,33 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="6caaa507-cb26-11df-9c1b-0011098ad87f"> + <topic>horde-dimp -- XSS vulnerability</topic> + <affects> + <package> + <name>horde-dimp</name> + <range><lt>1.1.5</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The Horde team reports:</p> + <blockquote cite="http://article.gmane.org/gmane.comp.horde.announce/519"> + <p>The major changes compared to DIMP version H3 (1.1.4) are:</p> + <p>* Fixed an XSS vulnerability when showing mailbox names.</p> + </blockquote> + </body> + </description> + <references> + <url>http://article.gmane.org/gmane.comp.horde.announce/519</url> + <url>http://git.horde.org/diff.php/dimp/docs/CHANGES?rt=horde&r1=1.69.2.82&r2=1.69.2.87&ty=h</url> + </references> + <dates> + <discovery>2010-09.28</discovery> + <entry>2010-09-28</entry> + </dates> + </vuln> + <vuln vid="6c4db192-cb23-11df-9c1b-0011098ad87f"> <topic>horde-imp -- XSS vulnerability</topic> <affects> |