CERT24CVE-2026-58451 — Horde IMP < 7.0.1: Path Traversal via Compose.php img srcLoading data…
CERT24Threat Observatory
Period

CVE-2026-58451 — Horde IMP < 7.0.1: Path Traversal via Compose.php img src

Horde IMP versions before 7.0.1 contain a CWE-22 path traversal vulnerability in lib/Compose.php. Authenticated attackers can read arbitrary files from the server filesystem by placing traversal sequences in img src URLs. The contents can be exfiltrated as MIME parts in outgoing email. The source also states that exploitation can be achieved through CSRF against an active authenticated session.

← Back to intelligence

CVE-2026-58451 — Horde IMP < 7.0.1: Path Traversal via Compose.php img src

Horde IMP versions before 7.0.1 contain a CWE-22 path traversal vulnerability in lib/Compose.php. Authenticated attackers can read arbitrary files from the server filesystem by placing traversal sequences in img src URLs. The contents can be exfiltrated as MIME parts in outgoing email. The source also states that exploitation can be achieved through CSRF against an active authenticated session.