Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions
{ "urgency": "not yet assigned" }