CVE-2017-16908 In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromising an administrator account, because the C...
MediumCVSS 5.4
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromising an administrator account, because the CVE-2015-7984 CSRF protection mechanism can then be bypassed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/php-horde-kronolith(Debian:12) | < 4.2.24-1 | 4.2.24-1 |
| horde groupware | = 5.2.19 | No fix listed |
References
- Debian Security Tracker CVE-2017-16908 vendor-advisory
- code610.blogspot.com exploit issue-tracking third-party-advisory
- github.com patch vendor-advisory
- [debian-lts-announce] 20200829 [SECURITY] [DLA 2350-1] php-horde-kronolith security update mailing-list
- bugs.debian.org issue-tracking