CVE-2017-7413

In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has PGP features enabled in their preferences, and attempts to encrypt an email addressed to a maliciously crafted email address.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:horde:groupware:*:*:*:*:webmail:*:*:*

Information

Published : 2017-04-04 07:59

Updated : 2019-10-02 17:03


NVD link : CVE-2017-7413

Mitre link : CVE-2017-7413


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

horde

  • groupware