A new unpatched security vulnerability has been disclosed in the open-source Horde Webmail client that could be exploited to achieve remote code execution on the email server simply by sending a specially crafted email to a victim.
“Once the email is viewed, the attacker can silently take over the complete mail server without any further user interaction,” SonarSource said in a report shared

A new unpatched security vulnerability has been disclosed in the open-source Horde Webmail client that could be exploited to achieve remote code execution on the email server simply by sending a specially crafted email to a victim.
“Once the email is viewed, the attacker can silently take over the complete mail server without any further user interaction,” SonarSource said in a report shared