Gonicus Gosa
2 CVEs affecting Gonicus Gosa. Latest disclosed: 2019-08-15. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11187 | Critical | 9.8 | 2019-08-15 | Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-in… |
CVE-2018-1000528 | Medium | 6.1 | 2018-06-26 | GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/p… |