296,147
Total vulnerabilities in the database
Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the trean/ URI on a webmail server. NOTE: treanBookmarkTags could, for example, be a stored XSS payload.
| Software | From | Fixed in |
|---|---|---|
| horde / groupware | - | 5.2.22.x |