CVE-2009-0932Horde Path Traversal
horde: XSS vulnerability and directory traversal vulnerability
Published Jan 27, 2009 · Updated Mar 9, 2026
Key Facts
Routine patching- CVE-2009-0932 is a medium-severity vulnerability (CVSS 6.4 v2) affecting Horde (Debian), Horde Groupware (Debian), horde3 (debian).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 46% probability of exploitation in the next 30 days.
- Fixed versions are available, including horde3 3.1.3-4etch5.
- Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.
Scores
CVSS v2
6.4
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS (30-day exploit likelihood)
46%
Higher than 98.7% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
40/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisoryhttp://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5
- advisoryhttp://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5
- advisoryhttp://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503
- advisory[announce] 20090127 Horde 3.3.3 (final)
- advisory[announce] 20090127 Horde 3.2.4 (final)
- advisory[announce] 20090127 Horde Groupware 1.1.5 (final)
Description
Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.
Affected Products
11 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| HordeDebian | 3.2, 3.2.2, 3.2.3, 3.3, 3.3.1, 3.3.2 | n/a |
| Horde GroupwareDebian | 1.1.1, 1.1.2, 1.1.3, 1.1.4 | n/a |
| horde3debian | See advisory | 3.1.3-4etch5 |
Patched Releases
horde3
3.1.3-4etch5
Timeline
Publicly disclosed
Jan 27, 2009
Last updated
Mar 9, 2026
Weakness Type
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
References
- advisorycvs.horde.org · CHANGES
- advisorycvs.horde.org · CHANGES
- advisorycvs.horde.org · CHANGES
- advisory[announce] 20090127 Horde 3.3.3 (final)
- advisory[announce] 20090127 Horde 3.2.4 (final)
FAQ
Common Questions.
Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.
Affected: Horde (Debian) versions 3.2, 3.2.2, 3.2.3, 3.3, 3.3.1, 3.3.2; Horde Groupware (Debian) versions 1.1.1, 1.1.2, 1.1.3, 1.1.4; horde3 (debian). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including horde3 3.1.3-4etch5.
Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.
Is CVE-2009-0932 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo