[Bug 200750] [NEW PORT] www/sogo: Groupware server with a focus on scalability and open standards

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200750

Jason Unovitch <jason.unovitch at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jason.unovitch at gmail.com

--- Comment #3 from Jason Unovitch <jason.unovitch at gmail.com> ---
FYI,
CVE-2015-5395 -- No CSRF token - requests can be forged
http://www.openwall.com/lists/oss-security/2015/07/07/10
http://www.sogo.nu/bugs/view.php?id=3246

This should be addressed before a known vulnerable version gets committed.

-- 
You are receiving this mail because:
You are the assignee for the bug.