CVE-2017-16908

概要

参考情報

• code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html · Exploit
• horde/kronolith commit 39f7400 · Patch
• lists.debian.org/debian-lts-announce/2020/08/msg00048.html

groupware のその他の脆弱性

• CVE-2025-41066中 5.3Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid acc…
• CVE-2022-30287高 8.0Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class…
• CVE-2021-26929中 6.1An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). Th…
• CVE-2020-8034中 6.1Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting …
• CVE-2020-8035中 6.1The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerabili…