CVE:CVE-2020-8518
CNNVD:CNNVD-202002-832
Horde Groupware Webmail是美国Horde公司的一套基于浏览器的企业级通信套件。
Horde Groupware Webmail Edition 5.2.22版本中存在代码注入漏洞。攻击者可借助CSV数据利用该漏洞注入任意PHP代码，进而执行代码。
solution:Upgrade horde groupware to a higher version than 5.2.22,and avoid the version 5.2.22; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0