webmail

mirror of https://github.com/bulwarkmail/webmail.git synced 2026-11-02 16:15:39 +00:00

Files

T

Linus Rath 76154187fa fix: only let a Stalwart superuser into the admin dashboard, not a tenant admin (GHSA-v6hr-cmxm-pv73)

The Stalwart admin check probed `x:Account/query`. Stalwart's default
tenant-admin role carries `sysAccount*`, so an administrator of a single
tenant passed and, in the default `auto` mode, was signed into the
Bulwark dashboard, which configures the whole instance for every
tenant. The `auto|password|off` switch added for #870 left the default
at `auto`, so the advisory never held on a default install.

The probe is now `x:Tenant/query`, which needs `sysTenantQuery`: by
default only the server-wide superuser holds it.

2026-09-26 14:19:58 +02:00

audit

fix: gate admin routes against cross-origin CSRF

2026-05-18 13:21:01 +02:00

auth

fix: only let a Stalwart superuser into the admin dashboard, not a tenant admin (GHSA-v6hr-cmxm-pv73)

2026-09-26 14:19:58 +02:00

branding

Feature: configurable PWA install screenshots (per-domain)

2026-05-30 15:45:59 +02:00

change-password

fix: gate admin routes against cross-origin CSRF