Описание
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via SVG content (with animate attributes) in an e-mail message. This may lead to information disclosure or access-control bypass.
Ссылки
- Patch
- Patch
- Patch
- Release Notes
- Release Notes
- Release Notes
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
5.3 Medium
CVSS3
Дефекты
Связанные уязвимости
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via SVG content (with animate attributes) in an e-mail message. This may lead to information disclosure or access-control bypass.
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. ...
Roundcube Webmail: Bypass of remote image blocking via SVG content (with animate attributes) in an e-mail message
Уязвимость функции удаленной блокировки изображений почтового клиента RoundCube Webmail, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
5.3 Medium
CVSS3