Security Advisory
CVE-2022-26874
5.4
MEDIUM
Vulnerability Description
lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.
Published Date
March 11, 2022
Official Source
NIST NVD Advisory