CVE-2005-4189: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when creating calendars, (2) event title field when deleting events, the (3) Category and (4) Location search fields, and the (5) attendees email address fields when editing event attendees, and possibly other vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4189?
CVE-2005-4189 has a moderate severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2005-4189?
To fix CVE-2005-4189, update your Horde Kronolith H3 to version 2.0.6 or later.
Which versions of Horde Kronolith H3 are affected by CVE-2005-4189?
CVE-2005-4189 affects Horde Kronolith H3 versions 2.0 through 2.0.5, including all release candidates.
What types of vulnerabilities are present in CVE-2005-4189?
CVE-2005-4189 contains multiple cross-site scripting (XSS) vulnerabilities.
Can CVE-2005-4189 be exploited by unauthenticated users?
No, CVE-2005-4189 requires remote authenticated users to exploit the vulnerabilities.