CVE-2022-30287
Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class
published July 28, 2022
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.
What it is
Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This then leads to arbitrary deserialization of PHP objects.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.69413 · 99.4th percentile
- Published
- 2022-07-28T21:08Z
EPSS history
Timeline