This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-8518 →
DEBIAN-CVE-2020-8518
Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.
Original description
The description as published by the source.
Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
php-horde-data
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-1"}]}]
References
- advisory security-tracker.debian.org