Cross-Site Scripting Vulnerability in Horde Groupware Webmail Edition by Horde
CVE-2012-0909

Currently unrated

Key Information:

Vendor: Horde
Status: Groupware Webmail Edition
Vendor: CVE Published:; 24 January 2012

What is CVE-2012-0909?

A cross-site scripting (XSS) vulnerability exists in Horde_Form component of Horde Groupware Webmail Edition prior to version 4.0.6. This flaw allows remote attackers to inject arbitrary web scripts or HTML into the application via unspecified vectors, particularly related to email verification processes. Successful exploitation may lead to unauthorized actions and data exposure in user accounts.

References

http://www.horde.org/apps/webmail/docs/CHANGES

x_refsource_CONFIRM

http://www.horde.org/apps/webmail/docs/RELEASE_NOTES

x_refsource_CONFIRM

http://www.securityfocus.com/bid/51586

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Jan 24, 2012

CVE-2012-0909 Data

JSON