Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-6826

Низкий

ALT-PU-2023-6826: package roundcube update to version 1.6.4-alt1

Источник
errata.altlinux.org
Дата публикации
31.10.2023
Дата обновления
31.10.2023
Устраненные уязвимости
4
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades roundcube to version 1.6.4-alt1.

Устраненные уязвимости4

Ссылки1

ALT-PU-2023-6826https://errata.altlinux.org/ALT-PU-2023-6826

Связанные уязвимости

ubuntu логотип

CVE-2023-43770

CVSS3: 6.1
ubuntu
около 3 лет назад

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.

nvd логотип

CVE-2023-43770

CVSS3: 6.1
nvd
около 3 лет назад

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.

debian логотип

CVE-2023-43770

CVSS3: 6.1
debian
около 3 лет назад

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 al ...

ubuntu логотип

CVE-2023-5631

CVSS3: 5.4
ubuntu
около 3 лет назад

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaScript code.

nvd логотип

CVE-2023-5631

CVSS3: 5.4
nvd
около 3 лет назад

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaScript code.