CVE-2008-3650

Publication date 13 August 2008

Last updated 24 July 2024

Description

Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
horde3	9.10 karmic	Not affected
	9.04 jaunty	Not affected
	8.10 intrepid	Not affected
	8.04 LTS hardy	Ignored
	7.10 gutsy	Ignored end of life, was needs-triage
	7.04 feisty	Ignored end of life, was needs-triage
	6.06 LTS dapper	Ignored end of life
turba2	9.10 karmic	Not affected
	9.04 jaunty	Not affected
	8.10 intrepid	Not affected
	8.04 LTS hardy	Not affected
	7.10 gutsy	Ignored end of life, was needs-triage
	7.04 feisty	Ignored end of life, was needs-triage
	6.06 LTS dapper	Ignored end of life

Notes

mdeslaur

this is a dupe of CVE-2008-3330, ignoring turba2 code introduced in 2.2.0

References

Other references

https://www.cve.org/CVERecord?id=CVE-2008-3650