Описание
Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 3.1.1-1 |
| devel | released | 3.1.1-1 |
| edgy | released | 3.1.1-1 |
| feisty | released | 3.1.1-1 |
| upstream | needs-triage |
Показывать по
Ссылки на источники
5.8 Medium
CVSS2
Связанные уязвимости
Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments.
Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3. ...
Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments.
5.8 Medium
CVSS2