Unscored DLA-1535-1 1 CVE

php-horde - security update

Published Oct 7, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	php-horde	5.2.1+debian0-2+deb8u4

Vulnerabilities 1

Unscored —

CVE-2017-16907

In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.

php-horde php-horde php-horde-core php-horde-core Debian Ubuntu

Nov 20, 2017