---

CVE-2016-7967 - log back

CVE-2016-7967 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Remote
Type	+ Cross-site scripting
Description	+ KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.
References	+ https://www.kde.org/info/security/advisory-20161006-2.txt + http://seclists.org/oss-sec/2016/q4/23
Notes	+ changed severity and type.. severity = medium, type = cross-site-scripting..