Debian/php-horde-mime-viewer: medium 5.4
lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.
Action: Upgrade php-horde-mime-viewer to 2.2.4+debian0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.4+debian0-1 | - |
Fixed versions
| 2.2.4+debian0-1 |
Sources
published · modified · JSON