CVE-2020-8518

Description

References

• packetstormsecurity.com/files/156872/Horde-5.2.22-CSV-Import-Code-Execution.html · Exploit
• lists.debian.org/debian-lts-announce/2020/04/msg00008.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PRPIFQDGYPQ3F2TF2ETPIL7IYNSVVZQ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKTNYDBDVJNMVC7QPXQI7CMPLX3USZ2T
• lists.horde.org/archives/announce/2020/001285.html · Mailing List

Autres vulnérabilités de groupware

• CVE-2025-41066MOYENNE 5.3Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid acc…
• CVE-2022-30287ÉLEVÉE 8.0Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class…
• CVE-2021-26929MOYENNE 6.1An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). Th…
• CVE-2020-8034MOYENNE 6.1Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting …
• CVE-2020-8035MOYENNE 6.1The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerabili…