Description
Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | php-horde | 5.1.5+debian0-1 | — |
| Debian 12 | php-horde-kronolith | 4.1.4-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | php-horde | No fix yet | — |
| Ubuntu 16.04 LTS | php-horde | No fix yet | — |
References
- https://security-tracker.debian.org/tracker/CVE-2013-6365
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6365
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6365
- http://archives.neohapsis.com/archives/bugtraq/2013-11/0013.html
- https://www.securityfocus.com/archive/1/529590
- https://packetstormsecurity.com/files/cve/CVE-2013-6365