Summary
USN-8242-1 fixed a vulnerability in CiviCRM. This update provides the
corresponding fix for PostfixAdmin.
Original advisory details:
Takuya Aramaki discovered that Smarty, vendored in CiviCRM, did not
properly escape JavaScript code. An attacker could possibly use this issue
to conduct a cross-site scripting attack.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | postfixadmin | 3.3.13-1ubuntu0.1~esm1 |
References
-
report
https://ubuntu.com/security/CVE-2023-28447