Описание
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| roundcube | fixed | 1.4.11+dfsg.1-1 | package | |
| roundcube | not-affected | buster | package | |
| roundcube | not-affected | stretch | package |
Примечания
https://roundcube.net/news/2021/02/08/security-update-1.4.11
https://github.com/roundcube/roundcubemail/commit/9dc276d5f26042db02754fa1bac6fbd683c6d596
EPSS
Процентиль: 64%
0.01018
Низкий
Связанные уязвимости
CVSS3: 5.4
ubuntu
почти 6 лет назад
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
CVSS3: 5.4
nvd
почти 6 лет назад
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
CVSS3: 5.4
github
больше 4 лет назад
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
CVSS3: 5.4
altlinux
почти 6 лет назад
ALT-PU-2021-1239: package `roundcube` update to version 1.4.11-alt1
EPSS
Процентиль: 64%
0.01018
Низкий