Unscored DLA-1536-1 1 CVE

php-horde-core - security update

Published Oct 7, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	php-horde-core	2.15.0+debian0-1+deb8u2

Vulnerabilities 1

Unscored —

CVE-2017-16907

In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.

php-horde php-horde php-horde-core php-horde-core Debian Ubuntu

Nov 20, 2017