6.0.0-beta1
▾
Tasks
New Task
Search
Photos
Wiki
▾
Tickets
New Ticket
Search
dev.horde.org
Toggle Alerts Log
Help
10/20/25
H
istory
A
ttachments
C
omment
W
atch
Download
Comment on [#4112] Upgrade Documentation about.php
*
Your Email Address
*
Spam protection
Enter the letters below:
.__..___.__ .__..__. [__][__ | \[__]| | | |[___|__/| ||__\
Comment
>> What are you talking about? > > /horde/services/help/about.php > > This file is obsolete in horde 3.1.1 - If you do an upgrade from > former versions by just overwriting the directory the file about.php > remains and opens horde to exploits. Version 3.1.1 fixed the remote > code execution vulnerability in the help viewer but if about.php > doesn't get deleted the vulnerability still exists. Therefore I > recommend to mention this risk in docs/UPGRADING or even better: > patch about.php to make it unusable. > >
Attachment
Watch this ticket
N
ew Ticket
M
y Tickets
S
earch
Q
uery Builder
R
eports
Saved Queries
Open Bugs
Bugs waiting for Feedback
Open Bugs in Releases
Open Enhancements
Enhancements waiting for Feedback
Bugs with Patches
Enhancements with Patches
Release Showstoppers
Stalled Tickets
New Tickets
Horde 5 Showstoppers