Impact

https://ubuntu.com/ is vulnerable to Content spoofing/text injection vulnerability leading to unauthorized access to any user resulting in credentials exposure of any user leading to account takeover.

Patches

No patch available yet

Workarounds

There is no need to upgrade, after merging the fix PR the issue will be gone

References

https://hackerone.com/reports/106350