Lucene search

K

[email protected]CVE-2024-37384

HistoryJun 07, 2024 - 4:15 a.m.

CVE-2024-37384

2024-06-0704:15:30

[email protected]

web.nvd.nist.gov

32

cve-2024-37384

xss

user preferences

list columns

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user preferences.

References

github.com/roundcube/roundcubemail/commit/cde4522c5c95f13c6aeeb1600ab17e5067a536f7

github.com/roundcube/roundcubemail/releases/tag/1.5.7

github.com/roundcube/roundcubemail/releases/tag/1.6.7

lists.debian.org/debian-lts-announce/2024/06/msg00008.html

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for CVE-2024-37384

osv4 ubuntucve1 cvelist1 nvd1 vulnrichment1 debiancve1 redos1 nessus3 openvas3 ubuntu1