CVE-2022-26874

lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware...

Original description

The description as published by the source.

lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-26874 php-horde-mime-viewer Fixed in: 2.2.4+debian0-2~deb11u1

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web lists.debian.org
web blog.sonarsource.com
web lists.debian.org
web lists.debian.org