Unscored DLA-2349-1 1 CVE

php-horde - security update

Published Aug 29, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	php-horde	5.2.13+debian0-1+deb9u3

Vulnerabilities 1

Unscored —

CVE-2017-16907

In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.

php-horde php-horde php-horde-core php-horde-core Debian Ubuntu

Nov 20, 2017