CVE-2012-5565: XSS

Q: What is the severity of CVE-2012-5565?

CVE-2012-5565 is classified as a medium-severity vulnerability due to its potential for enabling cross-site scripting attacks.

Q: How do I fix CVE-2012-5565?

To fix CVE-2012-5565, update Horde Internet Mail Program (IMP) to version 5.0.24 or later.

Q: Which versions of Horde IMP are affected by CVE-2012-5565?

CVE-2012-5565 affects Horde IMP versions before 5.0.24 and specifically versions 5.0.4 through 5.0.23.

Q: Can CVE-2012-5565 be exploited remotely?

Yes, CVE-2012-5565 can be exploited remotely by attackers injecting arbitrary scripts through crafted file names.

Q: What types of attacks can CVE-2012-5565 enable?

CVE-2012-5565 can enable cross-site scripting (XSS) attacks, which may lead to session hijacking or other malicious activities.

Published Apr 5, 2014

Updated

Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic view.

Affected Software

31 affected components

Horde IMP<=5.0.23

Horde IMP=5.0.4

Horde IMP=5.0.5

Horde IMP=5.0.6

Horde IMP=5.0.7

Horde IMP=5.0.8

Horde IMP=5.0.9

Horde IMP=5.0.10

Horde IMP=5.0.11

Horde IMP=5.0.12

Horde IMP=5.0.13

Horde IMP=5.0.14

Horde IMP=5.0.15

Horde IMP=5.0.16

Horde IMP=5.0.17

Horde IMP=5.0.18

Horde IMP=5.0.19

Horde IMP=5.0.20

Horde IMP=5.0.21

Horde IMP=5.0.22

Horde Groupware Webmail Edition<=4.0.8

Horde Groupware Webmail Edition=4.0

Horde Groupware Webmail Edition=4.0-rc1

Horde Groupware Webmail Edition=4.0-rc2

Horde Groupware Webmail Edition=4.0.1

Horde Groupware Webmail Edition=4.0.2

Horde Groupware Webmail Edition=4.0.3

Horde Groupware Webmail Edition=4.0.4

Horde Groupware Webmail Edition=4.0.5

Horde Groupware Webmail Edition=4.0.6

Horde Groupware Webmail Edition=4.0.7

Event History

Apr 5, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

via NVD·09:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2012-5565?

CVE-2012-5565 is classified as a medium-severity vulnerability due to its potential for enabling cross-site scripting attacks.

How do I fix CVE-2012-5565?

To fix CVE-2012-5565, update Horde Internet Mail Program (IMP) to version 5.0.24 or later.

Which versions of Horde IMP are affected by CVE-2012-5565?

CVE-2012-5565 affects Horde IMP versions before 5.0.24 and specifically versions 5.0.4 through 5.0.23.

Can CVE-2012-5565 be exploited remotely?

Yes, CVE-2012-5565 can be exploited remotely by attackers injecting arbitrary scripts through crafted file names.

What types of attacks can CVE-2012-5565 enable?