Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Horde Groupware Webmail 跨站脚本漏洞
Vulnerability Description
Horde Groupware Webmail是美国Horde公司的一套基于浏览器的企业级通信套件。 Horde Groupware Webmail 的 lib/Horde/Mime/Viewer/Ooo.php 文件中存在安全漏洞。该漏洞源于该文件允许利用OpenOffice文档进行跨站脚本攻击，从而导致Horde Groupware Webmail Edition中的账户被接管，这发生在可扩展样式表转换语言（XSLT）之后。以下产品及版本受到影响：Horde Groupware Webmail 2.2
CVSS Information
N/A
Vulnerability Type
N/A