Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | php-horde-kronolith | 4.2.19-1+deb9u2 |
Vulnerabilities 1
-
Unscored —
In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action.
Published Aug 29, 2020 · Updated Mar 9, 2026
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | php-horde-kronolith | 4.2.19-1+deb9u2 |