CVE-2019-12095
24.10.2019, 18:15
Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload.
| Vendor | Product | Version |
|---|---|---|
| horde | groupware | 𝑥 ≤ 5.2.22 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| php-horde |
| ||||||||||||||||||||||||||||
| php-horde-trean |
|
References