Releases41
Frequency4 months 2 weeks
Last Release
Stars1
Horde MIME Viewer Library

CVE History

CVEPublishedCVSS v3CVSS v2
5.4 MEDIUM3.5 LOW

lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.