CVE-2025-30349 PoC — IMP 安全漏洞

Description

Horde IMP (through 6.2.27) vulnerability – obfuscation via HTML encoding – XSS payload

介绍

# Horde IMP vulnerability – obfuscation via HTML encoding – XSS payload

Horde 5.2.23; IMP 6.2.27

The details of the vulnerability are explained in Details.md file.

The PoC creates and send an email with payload exploiting the vulnerability to the recipient. This kind of email has to be viewed in a Horde Web Client, not any client (like desktop client).

文件快照

备注