PT-2019-12636 · Horde+1 · Horde Groupware Webmail Edition+1

Published 2019-10-24 · Updated 2019-12-03 · CVE-2019-12094

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Horde Groupware Webmail Edition versions prior to 5.2.23

Description The issue allows for XSS attacks via specific URI parameters. This can be achieved through the admin/user.php endpoint with either the form=update f or form=remove f parameter and the user name variable, or through the admin/config/diff.php endpoint with the app variable.

Recommendations For Horde Groupware Webmail Edition versions prior to 5.2.23, update to version 5.2.23 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin/user.php and admin/config/diff.php endpoints until the update is applied. Avoid using the user name variable in the affected admin/user.php endpoint and the app variable in the admin/config/diff.php endpoint until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-12094

Affected Products

Debian

Horde Groupware Webmail Edition

References · 16

• 🔥 https://numanozdemir.com/respdisc/horde/horde.mp4 · Exploit
• 🔥 https://bugs.horde.org/ticket/14926 · Exploit
• 🔥 https://packetstormsecurity.com/files/152975/Horde-Webmail-5.2.22-XSS-CSRF-SQL-Injection-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/46903 · Exploit
• 🔥 https://numanozdemir.com/respdisc/horde/horde.txt · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2019050199 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12094 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12094 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12094 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/php-horde · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-12094 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12094 · Security Note
• https://ubuntu.com/security/CVE-2019-12094 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-12094 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-12094 · Security Note