MEDIUM
horde: XSS vulnerability and directory traversal vulnerability
Published Mar 17, 2009
4.3
MEDIUMCVSS 2.0
EPSS 2.03%
Description
Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
No data.
OR
- ≤ 3.3.1
- ≤ 3.3.2
- 3.2.2
- 3.2.3
- 3.3
- ≤ 1.1.1
- ≤ 1.1.2
- ≤ 1.1.3
- ≤ 1.1.4
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (13)
- http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5 x_refsource_CONFIRMVendor Advisory
- http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5 x_refsource_CONFIRM
- http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503 x_refsource_CONFIRM
- http://lists.horde.org/archives/announce/2009/000482.html mailing-listx_refsource_MLISTVendor Advisory
- http://lists.horde.org/archives/announce/2009/000483.html mailing-listx_refsource_MLISTVendor Advisory
- http://lists.horde.org/archives/announce/2009/000486.html mailing-listx_refsource_MLISTVendor Advisory
- http://secunia.com/advisories/33695 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://www.securityfocus.com/bid/33491 vdb-entryx_refsource_BIDPatch
- https://access.redhat.com/security/cve/CVE-2009-0931 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=490932 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0928 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2009-0931
- https://www.cve.org/CVERecord?id=CVE-2009-0931
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 17, 2009
Updated Sep 16, 2024
Reserved Mar 17, 2009
Link CVE-2009-0931
CISA Vulnrichment
No data
GitHub
No data