Horde remote code execution

Description

Horde Groupware Webmail Edition is a free, enterprise ready, browser-based communication suite. Pedro Ribeiro reported a remote code execution bug that is affecting Horde versions from at least horde 3.1.x to 5.1.1.

Remediation

Upgrade to the latest version of Horde.

References

Related Vulnerabilities

Severity

High

Classification

CVE-2014-1691 CWE-94 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Code Execution Missing Update