← Database

CVE-2022-26874

MEDIUM CVSS: 5.4 Published: 2022-03-11 Modified: 2026-06-17

Description

lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.

Affected Platforms

Debian Debian LinuxHorde Horde Mime Viewer

Weakness Type

CWE-79

References