Horde Form vulnerabilities

1 known vulnerability affecting horde/horde_form.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-8866MEDIUMCVSS 6.5PoCfixed in 2.0.202020-03-23

CVE-2020-8866 [MEDIUM] CWE-434 CVE-2020-8866: This vulnerability allows remote attackers to create arbitrary files on affected installations of Ho This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit this vulnerability. The specific flaw exists within add.php. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary