Debian/php-horde-turba: high 8
Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This then leads to arbitrary deserialization of PHP object
Action: Upgrade php-horde-turba to 4.2.25-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.25-6 | - |
Fixed versions
| 4.2.25-6 |
Sources
published · modified · JSON