CVE-2017-15235

PoC —

CVSS 3.0

7.5 high

EPSS

6%p92

Published

Oct 11, 2017 (Oct 11, 2017)

Modified

Jun 17, 2026

Description

The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact filename.

Vendors: horde
Products: groupware
Weakness: CWE-425
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (5.5%)

In the news0 stories

No ingested article mentions this CVE yet.