Horde Webmail Vulnerability

Resolved

Operational

Started over 4 years agoJune 10, 2022Lasted about 1 monthJune 10, 20224:07 AMJuly 18, 20227:44 AMUTC

Affected

Cloud WordPress Hosting

Cloud Reseller Hosting

Cloud Web Hosting

Updates

Resolved
July 18, 2022 at 7:44 AMUTC
Resolved
July 18, 2022 at 7:44 AMUTC
The vulnerability has been patched. Horde Webmail is now enabled and can be accessed using webmail.
Identified
June 10, 2022 at 4:07 AMUTC
Identified
June 10, 2022 at 4:07 AMUTC
An RCE vulnerability was recently discovered in horde, which can be exploited with the only requirement being that the victim opens a malicious email.

Horde Webmail has been currently disabled until a patch is released.

Please note, you can still access webmail using Roundcube.

CrocWeb - Horde Webmail Vulnerability – Incident details