CVE-2008-5917: XSS
Cross-site scripting (XSS) vulnerability in the XSS filter (framework/TextFilter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3.3, when Internet Explorer is being used, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to style attributes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5917?
CVE-2008-5917 is classified as a cross-site scripting (XSS) vulnerability that can potentially allow attackers to inject malicious scripts.
How do I fix CVE-2008-5917?
To mitigate CVE-2008-5917, upgrade the Horde Application Framework to the latest version where this vulnerability is not present.
Which versions are affected by CVE-2008-5917?
CVE-2008-5917 affects Horde Application Framework versions 3.2.2 and 3.3 when used with Internet Explorer.
What does CVE-2008-5917 exploit?
CVE-2008-5917 exploits a vulnerability in the XSS filter that allows remote attackers to inject arbitrary web scripts or HTML.
Are there any workarounds for CVE-2008-5917?
A potential workaround for CVE-2008-5917 is to avoid using Internet Explorer when accessing applications using the affected versions of the Horde Application Framework.