Описание
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-apps-legacy/xenial | released | 1.2~beta+dfsg.1-0ubuntu1+esm8 |
| esm-apps/bionic | released | 1.3.6+dfsg.1-1ubuntu0.1~esm8 |
| esm-apps/focal | released | 1.4.3+dfsg.1-1ubuntu0.1~esm8 |
| esm-apps/jammy | released | 1.5.0+dfsg.1-2ubuntu0.1~esm6 |
| esm-apps/noble | released | 1.6.6+dfsg-2ubuntu0.1+esm3 |
| esm-apps/resolute | needed | |
| esm-apps/xenial | released | 1.2~beta+dfsg.1-0ubuntu1+esm8 |
| jammy | needed | |
| noble | needed |
Показывать по
Ссылки на источники
EPSS
4.7 Medium
CVSS3
Связанные уязвимости
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled.
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled.
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading ...
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled.
Уязвимость почтового клиента RoundCube Webmail, связанная с включением функций из недостоверной контролируемой области, позволяющая нарушителю выполнить произвольный код
EPSS
4.7 Medium
CVSS3