FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

horde-base -- XSS: VCARD attachments vulnerability

Affected packages
horde-base < 3.3.11

Details

VuXML ID a3314314-f731-11df-a757-0011098ad87f
Discovery 2010-11-02
Entry 2010-11-23

The Horde team reports:

The major changes compared to Horde version 3.3.10 are:

* Fixed XSS vulnerability when viewing details of a vCard.

References

URL http://article.gmane.org/gmane.comp.horde.announce/532
URL http://bugs.horde.org/ticket/9357