CVE-2019-13389

Опубликовано: 20 мар. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection header, and the Content-Security-Policy header.

Ссылки

https://github.com/RainLoop/rainloop-webmail/commit/8eb4588917b4741889fdd905d4c32e3e86317693
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00027.html
https://github.com/RainLoop/rainloop-webmail/commit/8eb4588917b4741889fdd905d4c32e3e86317693
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00027.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:rainloop:webmail:*:*:*:*:*:*:*:*

Версия до 1.13.0 (исключая)

EPSS

Процентиль: 42%

0.00199

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2019-13389

CVSS3: 6.1

ubuntu

почти 6 лет назад

RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection header, and the Content-Security-Policy header.

CVE-2019-13389

CVSS3: 6.1

debian

почти 6 лет назад

RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as ...

GHSA-v8j5-m4qg-vx9m

CVSS3: 6.1

github

больше 3 лет назад

RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection header, and the Content-Security-Policy header.

EPSS

Процентиль: 42%

0.00199

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79