tocsin

Debian/php-horde-gollem: high 7.5

The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact fil

Action: Upgrade php-horde-gollem to 3.0.12-1 or later.

Affected

introducedfixedlast affected
03.0.12-1-

Fixed versions

3.0.12-1

Sources

published · modified · JSON