Cross-Site Scripting Vulnerability in Horde Application Framework
CVE-2008-5917

Currently unrated

Key Information:

Vendor: Horde
Status: Application Framework
Vendor: CVE Published:; 21 January 2009

What is CVE-2008-5917?

The Horde Application Framework versions 3.2.2 and 3.3 are susceptible to a Cross-Site Scripting (XSS) vulnerability when accessed through Internet Explorer. This vulnerability arises from weaknesses in the XSS filter found in the framework's text filter module. Attackers can exploit this flaw by injecting arbitrary web scripts or HTML content through undisclosed vectors related to style attributes, potentially compromising the security of users' sessions and data.

References

http://lists.opensuse.org/opensuse-security-announce/2009...

vendor-advisoryx_refsource_SUSE

http://secunia.com/advisories/34418

third-party-advisoryx_refsource_SECUNIA

http://cvs.horde.org/diff.php/framework/Text_Filter/Filte...

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 21, 2009
Vulnerability Reserved
Jan 20, 2009

CVE-2008-5917 Data

JSON