Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2013-6365 | third party advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6365 | issue tracking patch exploit third party advisory |
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6365 | issue tracking third party advisory |
http://archives.neohapsis.com/archives/bugtraq/2013-11/0013.html | broken link |
https://www.securityfocus.com/archive/1/529590 | exploit vdb entry third party advisory |
https://packetstormsecurity.com/files/cve/CVE-2013-6365 | vdb entry third party advisory |