advisories/21370.adv

type: security
subject: Updated phpldapadmin packages fix security vulnerability
CVE:
 - CVE-2017-11107
src:
  5:
   core:
     - phpldapadmin-1.2.3-5.1.mga5
  6:
   core:
     - phpldapadmin-1.2.3-7.1.mga6
description: |
  phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the
  form, element, rdn, or container parameter (CVE-2017-11107).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=21370
 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/32G6FKD3IJA6ARX774VQKNCVAH6VF4AX/
ID: MGASA-2017-0270
1	type: security
2	subject: Updated phpldapadmin packages fix security vulnerability
3	CVE:
4	- CVE-2017-11107
5	src:
6	5:
7	core:
8	- phpldapadmin-1.2.3-5.1.mga5
9	6:
10	core:
11	- phpldapadmin-1.2.3-7.1.mga6
12	description: \|
13	phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the
14	form, element, rdn, or container parameter (CVE-2017-11107).
15	references:
16	- https://bugs.mageia.org/show_bug.cgi?id=21370
17	- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/32G6FKD3IJA6ARX774VQKNCVAH6VF4AX/
18	ID: MGASA-2017-0270