Published: 20/11/2017 Updated: 29/08/2020

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.

Vulnerable Product	Search on Vulmon	Subscribe to Product
horde groupware 5.2.21
horde groupware 5.2.19

Debian Bug report logs - #909739 php-horde: CVE-2017-16907 XSS via Color field Package: php-horde; Maintainer for php-horde is Horde Maintainers <team+debian-horde-team@trackerdebianorg>; Source for php-horde is src:php-horde (PTS, buildd, popcon) Reported by: Markus Koschany <apo@debianorg> Date: Thu, 27 Sep 2018 ...

CWE-79 http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230 https://lists.debian.org/debian-lts-announce/2020/08/msg00046.html https://lists.debian.org/debian-lts-announce/2020/08/msg00047.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909739 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-16907

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect