Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions
{ "ubuntu_priority": "medium" }