TI-2020-06505 Aliases CVE-2020-8035 GHSA-7gcr-rp9v-fqcf

The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected…

LOW 29CWE-79Published 2020-05-18 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: Low · Low · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability via an SVG image upload containing a JavaScript payload. An attacker can obtain access to a victim's webmail account by making them visit a malicious URL.

Why it matters now

EPSS 0.00881 59th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:horde:groupware:::::webmail:::*	before 5.2.22	Vulnerable	Horde

cpe:2.3:a:horde:groupware:*:*:*:*:webmail:*:*:* Versions before 5.2.22 Vulnerable ·Horde

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2020-8035
2026-10-03 Alias added: GHSA-7gcr-rp9v-fqcf

References

Advisory 2

Other 1

[debian-lts-announce] 20200531 [SECURITY] [DLA 2230-1] php-horde security update

TI-2020-06837 Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV… CVSS 3.1CRITICAL 9.8
TI-2022-12524 Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack… CVSS 3.1HIGH 8.0
TI-2012-00202 Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as… CVSS 2.0HIGH 7.5
TI-2017-05066 In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17… CVSS 3.0HIGH 8.8
TI-2019-07239 Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. CVSS 3.1HIGH 8.8
TI-2008-06907 Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and… CVSS 2.0HIGH 10.0

See all 45 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences