CVE-2013-6275
published 2019-11-05CVE-2013-6275: Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
PriorityP339medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
EXPLOIT
EPSS
2.07%
79.1th percentile
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | php-horde-ingo | < php-horde-ingo 3.1.3-1 (bookworm) | php-horde-ingo 3.1.3-1 (bookworm) |
| horde | groupware | <= 5.1.2 | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv6.5MEDIUM
vendor_debian6.5MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p8w4-jhm7-qh3w: Multiple CSRF issues in Horde Groupware Webmail Edition 5
ghsa_unreviewed·2022-05-05
CVE-2013-6275 [MEDIUM] GHSA-p8w4-jhm7-qh3w: Multiple CSRF issues in Horde Groupware Webmail Edition 5
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
OSV
CVE-2013-6275: Multiple CSRF issues in Horde Groupware Webmail Edition 5
osv·2019-11-05·CVSS 6.5
CVE-2013-6275 [MEDIUM] CVE-2013-6275: Multiple CSRF issues in Horde Groupware Webmail Edition 5
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
Debian
CVE-2013-6275: php-horde-ingo - Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in bas...
vendor_debian·2013·CVSS 6.5
CVE-2013-6275 [MEDIUM] CVE-2013-6275: php-horde-ingo - Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in bas...
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
Scope: local
bookworm: resolved (fixed in 3.1.3-1)
bullseye: resolved (fixed in 3.1.3-1)
sid: resolved (fixed in 3.1.3-1)
No detection rules found.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2013-10/0134.htmlhttp://www.exploit-db.com/exploits/29274http://www.securityfocus.com/bid/63377http://www.securitytracker.com/id/1029285https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-6275https://exchange.xforce.ibmcloud.com/vulnerabilities/88321https://security-tracker.debian.org/tracker/CVE-2013-6275http://archives.neohapsis.com/archives/bugtraq/2013-10/0134.htmlhttp://www.exploit-db.com/exploits/29274http://www.securityfocus.com/bid/63377http://www.securitytracker.com/id/1029285https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-6275https://exchange.xforce.ibmcloud.com/vulnerabilities/88321https://security-tracker.debian.org/tracker/CVE-2013-6275
2019-11-05
Published