CVE:CVE-2015-8807
CNNVD:CNNVD-201602-360
Horde Groupware和Horde Groupware Webmail Edition都是美国Horde公司产品。Horde Groupware是一款免费的基于协作套件的浏览器。Horde Groupware Webmail Edition是一款免费的基于通信套件的企业浏览器。 
Horde Groupware 5.2.12之前版本和Horde Groupware Webmail Edition 5.2.12之前版本的horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php文件中的‘_renderVarInput_number’函数存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade horde groupware to a higher version than 5.2.11,and avoid the version 5.2.11; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0