CVE-2020-8866: Horde Groupware Webmail Edition add Page Unrestricted File Upload Arbitrary File Creation Vulnerability
First published: Mon Mar 23 2020(Updated: )
This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition. Authentication is required to exploit this vulnerability. The specific flaw exists within add.php. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the www-data user.
Credit: zdi-disclosures@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Horde Groupware Webmail Edition | ||
| Horde Groupware | =5.2.22 | |
| Horde Horde Form | <2.0.20 | |
| Debian Debian Linux | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-8866?
CVE-2020-8866 is a vulnerability that allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22.
How severe is CVE-2020-8866?
CVE-2020-8866 has a severity rating of 6.5, which is considered medium.
What software is affected by CVE-2020-8866?
Horde Groupware Webmail Edition 5.2.22 and Horde Horde Form up to version 2.0.0 are affected.
How can this vulnerability be exploited?
This vulnerability can be exploited by authenticated remote attackers using the add.php page of Horde Groupware Webmail Edition.
Are there any references for CVE-2020-8866?
Yes, you can find more information about CVE-2020-8866 at the following references: [Reference 1](https://lists.debian.org/debian-lts-announce/2020/03/msg00036.html), [Reference 2](https://lists.horde.org/archives/announce/2020/001288.html), [Reference 3](https://www.zerodayinitiative.com/advisories/ZDI-20-275/).
- collector/zdi-advisory
- alias/ZDI-20-275
- alias/ZDI-CAN-10125
- alias/CVE-2020-8866
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/title
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- vendor/horde
- canonical/horde groupware webmail edition
- canonical/horde groupware
- version/horde groupware/5.2.22
- canonical/horde horde form
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0