CVE:CVE-2020-8866
CNNVD:CNNVD-202003-519
Horde Groupware Webmail是美国Horde公司的一套基于浏览器的企业级通信套件。
Horde Groupware Webmail Edition 5.2.22版本中的add.php脚本存在代码问题漏洞，该漏洞源于程序没有正确验证用户提交的输入。攻击者可利用该漏洞上传任意文件。
solution:Upgrade horde groupware to a higher version than 5.2.22,and avoid the version 5.2.22; Upgrade horde horde_form to a higher version than 2.0.20,and avoid the version (,2.0.20); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0