Описание
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-apps/bionic | needed | |
| esm-apps/focal | needed | |
| esm-apps/jammy | needed | |
| esm-apps/noble | needed | |
| esm-apps/xenial | not-affected | code not present |
| jammy | needed | |
| noble | needed | |
| plucky | ignored | end of life, was needed |
| questing | needed |
Показывать по
10
EPSS
Процентиль: 2%
0.00013
Низкий
7.2 High
CVSS3
Связанные уязвимости
CVSS3: 7.2
nvd
около 2 месяцев назад
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
CVSS3: 7.2
debian
около 2 месяцев назад
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cr ...
CVSS3: 7.2
github
около 2 месяцев назад
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
EPSS
Процентиль: 2%
0.00013
Низкий
7.2 High
CVSS3