Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form.

It was discovered that horde3, the horde web application framework, is prone to a cross-site scripting attack and a cross-site request forgery.

Fix 2 security bugs by upgrading to 3.3.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
55610	Debian DSA-2278-1 : horde3 - several vulnerabilities	Nessus	Debian Local Security Checks	medium
50497	Fedora 13 : horde-3.3.9-1.fc13 (2010-16555)	Nessus	Fedora Local Security Checks	medium
50496	Fedora 14 : horde-3.3.9-1.fc14 (2010-16525)	Nessus	Fedora Local Security Checks	medium
50478	Fedora 12 : horde-3.3.9-1.fc12 (2010-16592)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2010-3694

high

Tenable Plugins

medium

medium

medium

medium