Hackers can steal the contents of Horde webmail inboxes with one click

guest · Oct 31, 2019

Hackers can steal the contents of Horde webmail inboxes with one click
October 31, 2019
https://techcrunch.com/2019/10/31/horde-webmail-inbox-one-click/

A security researcher has found several vulnerabilities in the popular open-source Horde web email software that allow hackers to near-invisibly steal the contents of a victim’s inbox.

Numan Ozdemir disclosed his vulnerabilities to Horde in May. An attacker can scrape and download a victim’s entire inbox by tricking them into clicking a malicious link in an email.
Once clicked, the inbox is downloaded to the attacker’s server.
NIST, the government department that maintains the national vulnerability database, said this week that the flaws pose a “high” security risk to users.

Ozdemir said some — though not all — of the vulnerabilities were recently fixed in the latest Horde webmail version. But the Horde community has not publicly acknowledged the vulnerability — or that users of earlier versions of the webmail are still vulnerable.
Click to expand...

Rasheed187 · Nov 3, 2019

Surely this has to be some kind of joke, how can security be this bad?

Log in or Sign up

Hackers can steal the contents of Horde webmail inboxes with one click

guest Guest

Rasheed187 Registered Member

Log in or Sign up

Hackers can steal the contents of Horde webmail inboxes with one click

guest Guest

Rasheed187 Registered Member

Useful Searches