CVE-2013-6275 Cross-site request forgery in n/a

Medium 6.5 Published 5 Nov 2019 Updated 6 Aug 2024

Attackers can perform unauthorized actions on behalf of authenticated users in Horde Groupware Webmail Edition via CSRF vulnerabilities.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2013-6275?

CVE-2013-6275 is a medium-severity vulnerability in Debian Debian Linux, published on 5 Nov 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.

Weakness: CWE-352

Which versions are affected by CVE-2013-6275?

It affects 2 products.

Products include Debian Debian Linux, Horde Groupware.

How do I fix CVE-2013-6275?

Upgrade to a fixed version.

Is CVE-2013-6275 being exploited?

There is no known exploitation of CVE-2013-6275 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

All Debian Debian Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2013-6275, GHSA-p8w4-jhm7-qh3w.