CVE-2017-16907

In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-11-20

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Groupware (Horde)

References

• http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html
• https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230
• https://lists.debian.org/debian-lts-announce/2020/08/msg00046.html
• https://lists.debian.org/debian-lts-announce/2020/08/msg00047.html