Horde Webmail contains zero-day RCE bug with no patch on the horizon - The Daily Swig

CSRF exploit requires user to open malicious email

CSRF exploit requires user to open malicious email A zero-day vulnerability in Horde Webmail enables attackers to take over the web server and pivot to compromising an organizations other services, … [+3277 chars]

full article...