Описание
Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer/test.php.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 1.5.0+dfsg.1-2 |
| esm-apps/bionic | not-affected | 1.3.6+dfsg.1-1ubuntu0.1~esm3 |
| esm-apps/focal | not-affected | 1.4.3+dfsg.1-1ubuntu0.1~esm3 |
| esm-apps/jammy | not-affected | 1.5.0+dfsg.1-2 |
| esm-apps/noble | not-affected | 1.5.0+dfsg.1-2 |
| esm-apps/xenial | not-affected | 1.2~beta+dfsg.1-0ubuntu1+esm3 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| focal | ignored | end of standard support, was needed |
| groovy | ignored | end of life |
Показывать по
EPSS
3.5 Low
CVSS2
5.4 Medium
CVSS3
Связанные уязвимости
Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer/test.php.
Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via ...
Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer/test.php.
Уязвимость конфигурации smtp установщика почтового клиента Roundcube, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных
EPSS
3.5 Low
CVSS2
5.4 Medium
CVSS3