UBUNTU-CVE-2019-12095

Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload...

PT-2019-12637

Name of the Vulnerable Software and Affected Versions Horde Trean versions prior to 5.2.22 Description The issue allows for CSRF, as demonstrated by the treanBookmarkTags parameter to the "trean/" URI on a webmail server. It is noted that treanBookmarkTags could potentially be a stored XSS payloa...

CVE-2019-12095: Improper Neutralization of Input During Web Page Generation

Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload...