Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2013-6275 | third party advisory |
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-6275 | third party advisory |
http://archives.neohapsis.com/archives/bugtraq/2013-10/0134.html | broken link |
http://www.exploit-db.com/exploits/29274 | exploit vdb entry third party advisory |
http://www.securityfocus.com/bid/63377 | vdb entry third party advisory |
http://www.securitytracker.com/id/1029285 | vdb entry third party advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/88321 | vdb entry third party advisory |