CVE-2016-5303

Опубликовано: 20 дек. 2016

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via crafted data:text/html content in a form (1) action or (2) xlink attribute.

Ссылки

http://marc.info/?l=horde-announce&m=147319066126665&w=2
Release Notes
Third Party Advisory
http://marc.info/?l=horde-announce&m=147319089526753&w=2
Release Notes
Third Party Advisory
http://www.securityfocus.com/bid/94997
https://github.com/horde/horde/commit/30d5506c20d26efbb9942fbdc6f981a0bd333b97
Patch
Vendor Advisory
https://github.com/horde/horde/commit/4d8176d1e9ef5cbd2b3fcacd9b9a4c8e482fb424
Patch
Vendor Advisory
http://marc.info/?l=horde-announce&m=147319066126665&w=2
Release Notes
Third Party Advisory
http://marc.info/?l=horde-announce&m=147319089526753&w=2
Release Notes
Third Party Advisory
http://www.securityfocus.com/bid/94997
https://github.com/horde/horde/commit/30d5506c20d26efbb9942fbdc6f981a0bd333b97
Patch
Vendor Advisory
https://github.com/horde/horde/commit/4d8176d1e9ef5cbd2b3fcacd9b9a4c8e482fb424
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:horde:groupware:5.2.15:*:*:*:*:*:*:*

cpe:2.3:a:horde:groupware:5.2.15:*:*:*:webmail:*:*:*

EPSS

Процентиль: 57%

0.00355

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2016-5303

CVSS3: 6.1

ubuntu

около 9 лет назад

CVE-2016-5303

CVSS3: 6.1

debian

около 9 лет назад

Cross-site scripting (XSS) vulnerability in the Horde Text Filter API ...

GHSA-6mv9-x42q-f8qh

CVSS3: 6.1

github

больше 3 лет назад

EPSS

Процентиль: 57%

0.00355

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79