Debian dla-3487 : fusiondirectory - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3487 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3487-1 [email protected]...

CVE-2022-36180

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting XSS via /fusiondirectory/index.php?message=injection, /fusiondirectory/index.php?message=invalidparameter&plug=Injection, /fusiondirectory/index.php?signout=1&message=injection&plug=106...

CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

Cross site scripting

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting XSS via /fusiondirectory/index.php?message=injection, /fusiondirectory/index.php?message=invalidparameter&plug=Injection, /fusiondirectory/index.php?signout=1&message=injection&plug=106...

Design/Logic Flaw

Fusiondirectory 1.3 suffers from Improper Session Handling...

CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...

CVE-2022-36179

Fusiondirectory 1.3 suffers from Improper Session Handling...