Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-36j9-fp7f-7f7m

Опубликовано: 03 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.

Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.

EPSS

Процентиль: 36%
0.00151
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-80

Связанные уязвимости

CVSS3: 6.1
ubuntu
около 1 года назад

Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.

CVSS3: 6.1
nvd
около 1 года назад

Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.

CVSS3: 6.1
debian
около 1 года назад

Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 al ...

EPSS

Процентиль: 36%
0.00151
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-80