Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker can obtain access to a victim's webmail account by making them visit a malicious URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Horde Groupware Webmail 跨站脚本漏洞
Vulnerability Description
Horde Groupware Webmail是美国Horde公司的一套基于浏览器的企业级通信套件。 Horde Groupware Webmail Edition 5.2.22之前版本中的图像查看功能存在跨站脚本漏洞。攻击者可借助特制恶意URL利用该漏洞获取用户Webmail帐户的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A