Vulnerability in Horde

CVE-2003-0728

Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL.

EPSS: 0.011 (62.2th percentile) — read the EPSS interpretation.

Affected products

  • Horde
  • N/a — versions n/a

References