Impact

On Internet Explorer there is an XSS issue. This is mitigated by the fact that LAM no longer supports IE anyway. Also it has no more vendor support.

Patches

The issue is fixed in version 8.0.

Workarounds

Install a recent browser.

For more information

If you have any questions or comments about this advisory:

• Open an issue in https://github.com/LDAPAccountManager/lam/issues
• Email us on lam-public mailinglist

Credits

Arseniy Sharoglazov