XSS in Horde

CVE-2008-3823

Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.030 (85.9th percentile) — read the EPSS interpretation.

Affected products

  • Horde — versions 3.2, 3.2.1
  • N/a — versions n/a

Weakness classification (CWE)

References