cbcvebase.
CVE-2017-15235
published 2017-10-11

CVE-2017-15235: The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn…

PriorityP262high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
5.53%
91.8th percentile
The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename.

Affected

2 ranges
VendorProductVersion rangeFixed in
debianphp-horde-gollem< php-horde-gollem 3.0.12-1 (bookworm)php-horde-gollem 3.0.12-1 (bookworm)
hordegroupware——

Detection & IOCsextracted from sources · hover to see the quote

url/services/download/?app=gollem&dir=%2Fhome%2Fuser&backend=sqlhome&fn=/test.php↗
  • →Alert on unauthenticated GET requests to the Horde download endpoint containing both 'app=gollem' and a 'fn' parameter with a leading '/' metacharacter. ↗
  • ·The vulnerability is specific to gollem module version 3.0.11 / Horde Groupware 5.2.21; it is resolved in gollem 3.0.12-1. ↗

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
vendor_debian7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.