CVE-2021-26929

概要

参考情報

• packetstormsecurity.com/files/162187/Webmail-Edition-5.2.22-XSS-Remote-Code-Execution.html · Exploit
• packetstormsecurity.com/files/162194/Horde-Groupware-Webmail-5.2.22-Cross-Site-Scripting.html · Third Party Advisory
• horde/webmail release · Third Party Advisory
• lists.debian.org/debian-lts-announce/2021/02/msg00028.html · Mailing List
• lists.horde.org/archives/announce/2021/001298.html · Mailing List
• alexbirnberg.com/horde-xss.html · Exploit
• horde.org/apps/webmail · Vendor Advisory

groupware のその他の脆弱性

• CVE-2025-41066中 5.3Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid acc…
• CVE-2022-30287高 8.0Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class…
• CVE-2020-8034中 6.1Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting …
• CVE-2020-8035中 6.1The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerabili…
• CVE-2020-8866中 6.5This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22. Au…