Количество 7
Количество 7
CVE-2024-42008
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header.
CVE-2024-42008
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header.
CVE-2024-42008
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() ...
GHSA-78jf-j6qx-c7j3
A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header.
BDU:2024-06254
Уязвимость функции rcmail_action_mail_get->run() почтового клиента RoundCube Webmail, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
openSUSE-SU-2024:0328-1
Security update for roundcubemail
ROS-20240826-17
Множественные уязвимости roundcubemail
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-42008 A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header. | CVSS3: 9.3 | 59% Средний | больше 1 года назад |
 | CVE-2024-42008 A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header. | CVSS3: 9.3 | 59% Средний | больше 1 года назад |
| CVE-2024-42008 A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() ... | CVSS3: 9.3 | 59% Средний | больше 1 года назад |
| GHSA-78jf-j6qx-c7j3 A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header. | CVSS3: 9.3 | 59% Средний | больше 1 года назад |
 | BDU:2024-06254 Уязвимость функции rcmail_action_mail_get->run() почтового клиента RoundCube Webmail, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 6.1 | 59% Средний | больше 1 года назад |
 | openSUSE-SU-2024:0328-1 Security update for roundcubemail | больше 1 года назад | ||
 | ROS-20240826-17 Множественные уязвимости roundcubemail | CVSS3: 9.3 | больше 1 года назад |
Уязвимостей на страницу