Описание
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | pending | 1.6.16+dfsg-1 |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | released | 1.3.6+dfsg.1-1ubuntu0.1~esm6 |
| esm-apps/focal | released | 1.4.3+dfsg.1-1ubuntu0.1~esm7 |
| esm-apps/jammy | released | 1.5.0+dfsg.1-2ubuntu0.1~esm5 |
| esm-apps/noble | released | 1.6.6+dfsg-2ubuntu0.1+esm2 |
| esm-apps/resolute | released | 1.6.11+dfsg-1ubuntu0.26.04.1~esm1 |
| esm-apps/xenial | not-affected | code not present |
| jammy | needed | |
| noble | needed |
Показывать по
Ссылки на источники
7.2 High
CVSS3
Связанные уязвимости
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cr ...
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
Уязвимость почтового клиента RoundCube Webmail, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
7.2 High
CVSS3