High severity7.5NVD Advisory· Published Oct 11, 2017· Updated May 13, 2026
CVE-2017-15235
CVE-2017-15235
Description
The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename.
Affected products
1- cpe:2.3:a:horde:groupware:5.2.21:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- blogs.securiteam.com/index.php/archives/3454nvdExploitThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/08/msg00050.htmlnvd
News mentions
0No linked articles in our index yet.