← back
CVE-2020-8518

CVE-2020-8518

EPSS 71.1%
Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/156872/Horde-5.2.22-CSV-Import-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/48215unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/156872/Horde-5.2.22-CSV-Import-Code-Execution.htmlhttps://lists.debian.org/debian-lts-announce/2020/04/msg00008.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PRPIFQDGYPQ3F2TF2ETPIL7IYNSVVZQ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKTNYDBDVJNMVC7QPXQI7CMPLX3USZ2T/https://lists.horde.org/archives/announce/2020/001285.html