Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3mvr-3jc2-mgf4

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.

EPSS

Процентиль: 49%
0.00254
Низкий

Дефекты

CWE-79

Связанные уязвимости

ubuntu
больше 13 лет назад

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.

nvd
больше 13 лет назад

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.

debian
больше 13 лет назад

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0 ...

EPSS

Процентиль: 49%
0.00254
Низкий

Дефекты

CWE-79