Unrated severityNVD Advisory· Published Apr 5, 2014· Updated May 6, 2026
CVE-2012-5565
CVE-2012-5565
Description
Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic view.
Affected products
31cpe:2.3:a:horde:groupware:4.0.1:*:webamail:*:*:*:*:*+ 10 more
- cpe:2.3:a:horde:groupware:4.0.1:*:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0.2:*:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0.3:*:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0.4:*:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0.5:*:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0.6:*:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0.7:*:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0:rc1:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0:rc2:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:4.0:*:webamail:*:*:*:*:*
- cpe:2.3:a:horde:groupware:*:*:webamail:*:*:*:*:*range: <=4.0.8
cpe:2.3:a:horde:imp:*:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:horde:imp:*:*:*:*:*:*:*:*range: <=5.0.23
- cpe:2.3:a:horde:imp:5.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.19:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.21:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.22:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:horde:imp:5.0.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- lists.horde.org/archives/announce/2012/000840.htmlnvdVendor Advisory
- lists.horde.org/archives/announce/2012/000833.htmlnvd
- lists.opensuse.org/opensuse-updates/2012-12/msg00020.htmlnvd
- www.openwall.com/lists/oss-security/2012/11/23/6nvd
- github.com/horde/horde/commit/1550c6ecd7204f9579fcbb09ec7089e01b0771e2nvd
News mentions
0No linked articles in our index yet.