Horde remote code execution

Description
  • Horde Groupware Webmail Edition is a free, enterprise ready, browser-based communication suite. Pedro Ribeiro reported a remote code execution bug that is affecting Horde versions from at least horde 3.1.x to 5.1.1.
Remediation
  • Upgrade to the latest version of Horde.
References