Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-apps/horde.Upgrade www-apps/horde-passwd.Upgrade www-apps/horde-imp. | Oct 30, 2017 | Jan 20, 2009 |
| Suse | — | Upgrade horde | Feb 17, 2015 | Jan 20, 2009 |
| Ubuntu | — | Upgrade horde3 | Nov 19, 2024 | Jan 21, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub