Description
Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 does not properly handle data: URIs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via data:text/html values for the HREF attribute of an A element in an HTML e-mail message. NOTE: the vendor states that the issue is caused by "an XSS vulnerability in Firefox browsers."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | horde3 | 3.2.2+debian0-2+lenny2 | DSA-1966-1 |
| Debian 4.0 | horde3 | 3.1.3-4etch7 | DSA-1966-1 |
Advisories 1
- DSA-1966-1 horde3 - cross-site scripting Debian Security (DSA / DLA) · Mar 9, 2026
References
- [announce] 20091216 Horde Groupware 1.2.5 (final) mailing-list
- [announce] 20091215 Horde 3.3.6 (final) mailing-list
- http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.559&r2=1.515.2.589&ty=h
- http://bugs.horde.org/view.php?actionID=view_file&type=patch&file=0002-Bug-8715-Fix-XSS-vulnerability%5B1%5D.patch&ticket=8715
- [announce] 20091217 Horde Groupware Webmail Edition 1.2.5 (final) mailing-list
- http://bugs.horde.org/ticket/8715
- 1023365 vdb-entry