CVE-2022-30287: Debian Linux

High severity, CVSS 8.0. EPSS: 70.7% chance of exploitation in the next 30 days.

Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This then leads to arbitrary deserialization of PHP objects.

Affected products

• Debian Debian Linux: version 10.0 only
• Horde Groupware: up to and including 5.2.22

Published 2022-07-28. Last modified 2026-06-17.