CVE-2009-0413

2009-02-0323:30:00

Debian Security Bug Tracker

security-tracker.debian.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

66.0%

JSON

Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message.

OSVersionArchitecturePackageVersionFilename
Debian12allroundcube< 0.2~stable-1roundcube_0.2~stable-1_all.deb
Debian11allroundcube< 0.2~stable-1roundcube_0.2~stable-1_all.deb
Debian10allroundcube< 0.2~stable-1roundcube_0.2~stable-1_all.deb
Debian999allroundcube< 0.2~stable-1roundcube_0.2~stable-1_all.deb
Debian13allroundcube< 0.2~stable-1roundcube_0.2~stable-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	roundcube	< 0.2~stable-1	roundcube_0.2~stable-1_all.deb
Debian	11	all	roundcube	< 0.2~stable-1	roundcube_0.2~stable-1_all.deb
Debian	10	all	roundcube	< 0.2~stable-1	roundcube_0.2~stable-1_all.deb
Debian	999	all	roundcube	< 0.2~stable-1	roundcube_0.2~stable-1_all.deb
Debian	13	all	roundcube	< 0.2~stable-1	roundcube_0.2~stable-1_all.deb