Описание
[Zero-click stored XSS via TNEF MIME tag injection in the attachment URL]
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| roundcube | fixed | 1.6.19+dfsg-1 | package | |
| roundcube | fixed | 1.6.19+dfsg-0+deb13u1 | trixie | package |
| roundcube | fixed | 1.6.5+dfsg-1+deb12u12 | bookworm | package |
Примечания
Fixed by: https://github.com/roundcube/roundcubemail/commit/e4a0f82f4c648606de0867ee16b4a5f591ddbd69 (1.6.19)
Follow-up: https://github.com/roundcube/roundcubemail/commit/7095e8d9de10d2f8bb90c3639c582edf8e371d5c (1.6.19)