CVE-2019-16236

Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...

CVE-2019-16236: Missing Authorization

Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...

PT-2019-4128

Name of the Vulnerable Software and Affected Versions Dino before 2019-09-10 Description The issue is related to insufficient input validation in the /roster/module.vala module of the Dino instant messaging client. This can potentially allow a remote attacker to impact data integrity...