Filtered by vendor Horde Subscriptions
Filtered by product Horde Mime Viewer Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-26874 2 Debian, Horde 2 Debian Linux, Horde Mime Viewer 2024-11-21 5.4 Medium
lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.