| Package | Affected versions | Patched versions |
|---|---|---|
| horde mime viewer | < 2.2.4 | 2.2.4 |
lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free