Author: Stefan Pietsch

Security Advisory 2203-01

Trovent Security GmbH discovered that the GroupWise web application transmits the session ID in HTTP GET requests in the URL when email content is accessed.

Security Advisory 2109-01

Trovent Security GmbH discovered an SQL injection vulnerability in the search function of the calendar module.

Security Advisory 2105-02

Trovent Security GmbH discovered that the Dolibarr application does not escape "greater than" and "smaller than" characters if they are reflected in one of the small pop-up windows with details of the object.