Описание
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| roundcube | fixed | 1.4.11+dfsg.1-1 | package | |
| roundcube | not-affected | buster | package | |
| roundcube | not-affected | stretch | package |
Примечания
https://roundcube.net/news/2021/02/08/security-update-1.4.11
https://github.com/roundcube/roundcubemail/commit/9dc276d5f26042db02754fa1bac6fbd683c6d596
EPSS
Процентиль: 49%
0.00259
Низкий
Связанные уязвимости
CVSS3: 5.4
ubuntu
больше 4 лет назад
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
CVSS3: 5.4
nvd
больше 4 лет назад
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
CVSS3: 5.4
github
больше 3 лет назад
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
EPSS
Процентиль: 49%
0.00259
Низкий