Groupware@5.2.21 Security Vulnerabilities and Issues — Groupware@5.2.21 CVE List

Lucene search

HordeGroupware5.2.21

2 matches found

cve•added 2017/10/11 3:29 a.m.•61 views

CVE-2017-15235

The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename.

7.5CVSS7.4AI score0.16059EPSS

cve•added 2017/11/20 8:29 p.m.•49 views

CVE-2017-16907

In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.

5.4CVSS5AI score0.00227EPSS