vulnerability
Znuny ships a patch for a 9.5 auth bypass and a SQL injection that share one root cause
Two newly published Znuny vulnerabilities, both fixed in 7.3.7 and LTS 6.5.25, trace back to the same class of bug: unvalidated HTTP header input reaching privileged code paths.