Описание
Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 1.6.7+dfsg-1 |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | released | 1.3.6+dfsg.1-1ubuntu0.1~esm2 |
| esm-apps/focal | released | 1.4.3+dfsg.1-1ubuntu0.1~esm2 |
| esm-apps/jammy | released | 1.5.0+dfsg.1-2ubuntu0.1~esm1 |
| esm-apps/noble | not-affected | 1.6.6+dfsg-2 |
| esm-apps/resolute | not-affected | 1.6.7+dfsg-1 |
| esm-apps/xenial | not-affected | code not present |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected] |
Показывать по
Ссылки на источники
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences.
Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML ...
Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences.
Уязвимость почтового клиента Roundcube, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки
ALT-PU-2022-1073: package `roundcube` update to version 1.5.2-alt1
4.3 Medium
CVSS2
6.1 Medium
CVSS3