Описание
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| roundcube | fixed | 0.7.2-4 | package | |
| roundcube | not-affected | squeeze | package |
Примечания
http://trac.roundcube.net/ticket/1488613
EPSS
Процентиль: 89%
0.03716
Низкий
Связанные уязвимости
ubuntu
почти 14 лет назад
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
nvd
почти 14 лет назад
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
github
больше 4 лет назад
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
EPSS
Процентиль: 89%
0.03716
Низкий