Cross-Site Request Forgery Vulnerability in Horde Application Framework
CVE-2010-3694

Currently unrated

Key Information:

Vendor

Horde

Status
Horde Application Framework
Vendor
CVE Published:
9 November 2010

What is CVE-2010-3694?

The Horde Application Framework before version 3.3.9 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability, which can allow remote attackers to exploit the authentication of unsuspecting users by sending unauthorized requests to a preference form. This vulnerability may lead to inappropriate configuration changes or data exposure.

References

https://bugzilla.redhat.com/show_bug.cgi?id=630687
x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.