CVE-2009-4363

Опубликовано: 21 дек. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not properly handle data: URIs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via data:text/html values for the HREF attribute of an A element in an HTML e-mail message. NOTE: the vendor states that the issue is caused by "an XSS vulnerability in Firefox browsers."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:horde:application_framework:*:*:*:*:*:*:*:*

Версия до 3.3.5 (включая)

cpe:2.3:a:horde:application_framework:2.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.2.4_rc1:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0.8:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.0.9:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.2.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.2.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.3.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.3.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.3.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:application_framework:3.3.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*

Версия до 1.2.4 (включая)

cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:horde:groupware:*:*:*:*:*:*:*:*

Версия до 1.2.4 (включая)

cpe:2.3:a:horde:groupware:1.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1:rc1:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1:rc2:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1:rc3:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1:rc4:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2:rc1:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:1.2.3:rc1:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00477

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2009-4363

ubuntu

около 16 лет назад

CVE-2009-4363

redhat

около 16 лет назад

CVE-2009-4363

debian

около 16 лет назад

Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framewo ...

GHSA-pjmv-2gvx-rph8

github

больше 3 лет назад

EPSS

Процентиль: 64%

0.00477

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79