{"id":"CVE-2022-26874","aliases":["DEBIAN-CVE-2022-26874","DLA-3045-1","DLA-3089-1","DLA-3924-1","EUVD-2022-31423","GHSA-q622-5f2g-fmg6","UBUNTU-CVE-2022-26874"],"status":"published","title":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice...","description":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01051,"percentile":0.64715,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2022-03-11T06:02:56Z","modified":"2026-10-28T02:30:29Z","fixes":[{"ecosystem":"Debian:12","package":"php-horde-mime-viewer","fixed_in":["2.2.4+debian0-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"php-horde-mime-viewer","fixed_in":["2.2.1-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"php-horde-mime-viewer","fixed_in":["2.2.2-3+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"php-horde-mime-viewer","fixed_in":["2.2.4+debian0-2~deb11u1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"php-horde-mime-viewer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4+debian0-1"}]}],"versions":["1.0.8-1","1.0.8-1.1","2.0.1-1","2.0.1-2","2.0.2-1","2.0.4-1","2.0.5-1","2.0.6-1","2.0.7-1","2.0.7-2","2.1.0-1","2.1.1-1","2.1.1-2","2.1.2-1","2.1.2-2","2.1.3-1","2.1.3-2","2.2.1-1","2.2.2-1","2.2.2-2","2.2.2-3","2.2.2-4"]},{"source":"osv","ecosystem":"Debian:9","package":"php-horde-mime-viewer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1+deb9u1"}]}],"versions":["2.2.1-1"]},{"source":"osv","ecosystem":"Debian:10","package":"php-horde-mime-viewer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-3+deb10u1"}]}],"versions":["2.2.2-3"]},{"source":"osv","ecosystem":"Debian:11","package":"php-horde-mime-viewer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4+debian0-2~deb11u1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php-horde-mime-viewer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.1-1","2.1.1-2","2.1.2-1","2.1.2-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php-horde-mime-viewer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.1-1","2.2.2-1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"horde","product":"horde_mime_viewer"}],"references":[{"url":"https://blog.sonarsource.com/horde-webmail-account-takeover-via-email/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","article","report"]},{"url":"https://github.com/horde/Mime_Viewer/commit/02b46cec1a7e8f1a6835b628850cd56b85963bb5","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/06/msg00007.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00021.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00015.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26874","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q622-5f2g-fmg6"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/26xxx/CVE-2022-26874.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-26874","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-26874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26874","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-26874","description":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.","status":"published","published":"2022-03-11T06:02:56Z","modified":"2024-10-19T18:02:57.612Z","updated_at":"2026-11-02T14:34:25.954329Z"}],"euvd":[{"id":"EUVD-2022-31423","description":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.","status":"published","published":"2022-03-11T06:02:56Z","modified":"2024-10-19T18:02:57Z","updated_at":"2026-11-03T00:27:32.691525Z"}],"ghsa":[{"id":"GHSA-q622-5f2g-fmg6","title":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice...","description":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.","status":"published","published":"2022-03-12T00:00:36Z","modified":"2023-01-28T05:04:38Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:44:12.731424Z"}],"nvd":[{"id":"CVE-2022-26874","description":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.","status":"published","published":"2022-03-11T07:15:08.037Z","modified":"2026-06-17T04:36:03.073Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:13.7085Z"}],"osv":[{"id":"DEBIAN-CVE-2022-26874","description":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.","status":"published","published":"2022-03-11T07:15:08.037Z","modified":"2026-11-03T08:00:20.587465557Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"UBUNTU-CVE-2022-26874","description":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.","status":"published","published":"2022-03-11T07:15:00Z","modified":"2025-10-24T04:53:35Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CVE-2022-26874","description":"lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.","status":"published","published":"2022-03-11T06:02:56Z","modified":"2026-10-28T02:30:29.081438984Z","updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"DLA-3045-1","title":"php-horde-mime-viewer - security update","status":"published","published":"2022-06-06T00:00:00Z","modified":"2026-03-09T01:21:38.294477Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3089-1","title":"php-horde-mime-viewer - security update","status":"published","published":"2022-08-31T00:00:00Z","modified":"2026-03-09T01:20:30.806459Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3924-1","title":"php-horde-mime-viewer - security update","status":"published","published":"2024-10-19T00:00:00Z","modified":"2026-03-09T01:19:54.868213Z","updated_at":"2026-11-02T15:46:12.203458Z"}]}}