Lucene search
MitreCVE-2022-30287HistoryJul 28, 2022 - 10:15 p.m.
CVE-2022-30287
2022-07-2822:15:08
CWE-502
CWE-470
mitre
web.nvd.nist.gov
68
4
cve-2022-30287
horde groupware
webmail
reflection injection
vulnerability
nvd
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0.005
Percentile
75.8%
Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This then leads to arbitrary deserialization of PHP objects.
Affected configurations
Node
hordegroupwareRange≤5.2.22webmail
Node
debiandebian_linuxMatch10.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| horde | groupware | * | cpe:2.3:a:horde:groupware:*:*:*:*:webmail:*:*:* |
| debian | debian_linux | 10.0 | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
References
Social References
More
Related
ubuntucve
ubuntucve
CVE-2022-30287
2022-07-28 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-06-14 22:52:14
debiancve
debiancve
CVE-2022-30287
2022-07-28 22:15:08
checkpoint_advisories
checkpoint_advisories
Horde Groupware Webmail Edition Insecure Deserialization (CVE-2022-30287)
2022-10-26 00:00:00
prion
prion
Design/Logic Flaw
2022-07-28 22:15:00
debian
debian
[SECURITY] [DLA 3090-1] php-horde-turba security update
2022-08-31 08:47:24
osv
osv
CVE-2022-30287
2022-07-28 22:15:08
php-horde-turba - security update
2022-08-31 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3090-1)
2022-09-01 00:00:00
Horde Groupware Webmail <= 5.2.22 RCE Vulnerability (May 2022)
2022-08-03 00:00:00
nvd
nvd
CVE-2022-30287
2022-07-28 22:15:08
nessus
nessus
Debian DLA-3090-1 : php-horde-turba - LTS security update
2022-08-31 00:00:00
cvelist
cvelist
CVE-2022-30287
2022-07-28 21:08:21
thn
thn
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
High
EPSS
0.005
Percentile
75.8%
Related for CVE-2022-30287