Approved changes feed: RSS · Atom

cpe:2.3:a:horde:horde_mime_viewer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHorde (11d5bec1-2c1f-5ad3-b7a5-41ab167a139d)
ProductHorde Mime Viewer (d1572a67-d09f-5f20-ac35-3498fe4ffd6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/php-horde-mime-viewer purl2cpe 2026-06-01 10:15:53.449006
pkg:deb/ubuntu/php-horde-mime-viewer purl2cpe 2026-06-01 10:15:53.449009
pkg:github/horde/mime_viewer purl2cpe 2026-06-01 10:15:53.449012
pkg:rpm/fedora/php-horde-horde-mime-viewer purl2cpe 2026-06-01 10:15:53.449015
pkg:rpm/opensuse/php-horde-horde-mime-viewer purl2cpe 2026-06-01 10:15:53.449017

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26874 vulnerable 2026-06-08 05:41:54.392647 Details available
lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.
Published: 2022-03-11T06:02:56.000Z
Updated: 2024-10-19T18:02:57.612Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.