CVE-2012-4384

CVE-2012-4384 affects letodms and involves multiple XSS issues: reflected XSS on the login page, and stored XSS in the Document Owner/User name and in the Calendar. The provided documents do not specify affected versions, root-cause details beyond generic XSS, exploit status, or available remedia...

CVE-2012-4385

CVE-2012-4385 affects letodms 3.3.6. The connected documents identify a CSRF vulnerability in the change password flow, enabling an attacker to induce password changes without user intent. Root cause is CSRF in the authentication workflow, with impact limited to confidentiality/ integrity of the ...