davical: CVE-2019-18345 CVE-2019-18346 CVE-2019-18347

Debian Bug report logs - #946343
davical: CVE-2019-18345 CVE-2019-18346 CVE-2019-18347

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: davical: CVE-2019-18345 CVE-2019-18346 CVE-2019-18347

Date: Sat, 07 Dec 2019 16:34:38 +0100

Source: davical
Version: 1.1.8-1
Severity: important
Tags: security upstream

Hi,

The following vulnerabilities were published for davical.

CVE-2019-18345[0]:
| Reflected Cross-Site Scripting (XSS) vulnerability

CVE-2019-18346[1]:
| A CSRF issue was discovered in DAViCal through 1.1.8. If an
| authenticated user visits an attacker-controlled webpage, the attacker
| can send arbitrary requests in the name of the user to the
| application. If the attacked user is an administrator, the attacker
| could for example add a new admin user.


CVE-2019-18347[2]:
| A stored XSS issue was discovered in DAViCal through 1.1.8. It does
| not adequately sanitize output of various fields that can be set by
| unprivileged users, making it possible for JavaScript stored in those
| fields to be executed by another (possibly privileged) user. Affected
| database fields include Username, Display Name, and Email.


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-18345
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18345
[1] https://security-tracker.debian.org/tracker/CVE-2019-18346
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18346
[2] https://security-tracker.debian.org/tracker/CVE-2019-18347
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18347

Please adjust the affected versions in the BTS as needed. If affected
version do not match for all those, feel free to clone individual bugs
repsectively.

Regards,
Salvatore

Send a report that this bug log contains spam.