GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password for...

References

• advisory https://github.com/gosa-project/gosa-core/issues/14
• advisory https://lists.debian.org/debian-lts-announce/2018/07/msg00028.html
• advisory https://www.debian.org/security/2018/dsa-4239
• patch https://github.com/gosa-project/gosa-core/commit/56070d6289d47ba3f5918885954dcceb75606001