Horde

Horde Image Api

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2017-14650

Exploit
  • EPSS 3%
  • Published 21.09.2017 17:29:00
  • Last modified 20.04.2025 01:37:25

A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability ...

8.8

CVE-2017-9774

  • EPSS 7.07%
  • Published 21.06.2017 18:29:00
  • Last modified 20.04.2025 01:37:25

Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication.