Lucene search
MitreCVELIST:CVE-2024-42010HistoryAug 05, 2024 - 12:00 a.m.
CVE-2024-42010
2024-08-0500:00:00
mitre
www.cve.org
roundcube
mod_css_styles
vulnerability
cascading style sheets
remote attacker
sensitive information
EPSS
0
Percentile
16.3%
mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in rendered e-mail messages, allowing a remote attacker to obtain sensitive information.
References
github.com/roundcube/roundcubemail/releases
github.com/roundcube/roundcubemail/releases/tag/1.5.8
github.com/roundcube/roundcubemail/releases/tag/1.6.8
roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8
sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/
Related
ubuntucve
ubuntucve
CVE-2024-42010
2024-08-05 00:00:00
nvd
nvd
CVE-2024-42010
2024-08-05 19:15:38
redhatcve
redhatcve
CVE-2024-42010
2024-08-06 09:48:30
osv
osv
CVE-2024-42010
2024-08-05 19:15:38
roundcubemail-1.6.8-1.1 on GA media
2024-08-07 00:00:00
roundcube - security update
2024-08-08 00:00:00
cve
cve
CVE-2024-42010
2024-08-05 19:15:38
debiancve
debiancve
CVE-2024-42010
2024-08-05 19:15:38
vulnrichment
vulnrichment
CVE-2024-42010
2024-08-05 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-b60eb661a4)
2024-08-16 00:00:00
Debian: Security Advisory (DSA-5743-2)
2024-08-09 00:00:00
Roundcube Webmail < 1.5.8, 1.6.x < 1.6.8 Multiple Vulnerabilities - Windows
2024-08-05 00:00:00
mageia
mageia
Updated roundcubemail packages fix security vulnerabilities
2024-08-15 20:48:28
nessus
nessus
Fedora 40 : roundcubemail (2024-2e908e829a)
2024-08-15 00:00:00
Fedora 39 : roundcubemail (2024-b60eb661a4)
2024-08-15 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: roundcubemail-1.6.8-1.fc40
2024-08-15 02:34:19
[SECURITY] Fedora 39 Update: roundcubemail-1.6.8-1.fc39
2024-08-15 14:23:12
freebsd
freebsd
Roundcube -- Multiple vulnerabilities
2024-08-04 00:00:00
redos
redos
ROS-20240826-17
2024-08-26 00:00:00
thn
thn
Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords
2024-08-07 13:29:00