Bug#962123: roundcube: Cross-Site Scripting (XSS) vulnerability in template object 'username'

[Guilhem Moulin]

Source: roundcube
Severity: important
Tags: security

AFAICT no CVE was assigned for this yet.  1.2.x, 1.3.x and 1.4.x
branches are affected.  Upstream fix:

    1.4.x 
https://github.com/roundcube/roundcubemail/commit/4beec65d40c5e5b1f2bace935c110baf05e10ae5
    1.3.x 
https://github.com/roundcube/roundcubemail/commit/37e2bc745723ef6322f0f785aefd0b9313a40f19

-- 
Guilhem.

signature.asc
Description: PGP signature