CVE-2025-41066
mediumpriority · track · 21EPSS 0.002 · 16 %ileEUUSEPSS · scored 2026-10-29
Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the specified user exists, the server will return the download of an empty file; if it does not exist, no download will be initiated, which unequivocally reveals the validity of the user.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.7–6.9
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
- https://www.horde.org/Patchcnnvd
- https://www.incibe.es/en/incibe-cert/notices/aviso/disclosure-sensitive-information-horde-groupwarecnnvd
- https://www.incibe.es/en/incibe-cert/notices/aviso/disclosure-sensitive-information-horde-groupwareenisa_euvd
- https://www.incibe.es/en/incibe-cert/notices/aviso/disclosure-sensitive-information-horde-groupwareThird Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan