CVE-2020-8518

PoC —

CVSS 3.1

9.8 critical

EPSS

72%p99

Published

Feb 17, 2020 (Feb 17, 2020)

Modified

Jun 17, 2026

Description

Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.

Vendors: horde fedoraproject debian
Products: groupware, fedora, debian linux
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (71.7%)

In the news0 stories

No ingested article mentions this CVE yet.