Lucene search
HistoryAug 29, 2013 - 12:07 p.m.
CVE-2013-5645
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.3
Confidence
High
EPSS
0.004
Percentile
73.1%
Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.
Affected configurations
Node
roundcubewebmailRange≤0.9.2
ORroundcubewebmailMatch0.1
ORroundcubewebmailMatch0.120050811
ORroundcubewebmailMatch0.120050820
ORroundcubewebmailMatch0.120051007
ORroundcubewebmailMatch0.120051021
ORroundcubewebmailMatch0.1alpha
ORroundcubewebmailMatch0.1beta
ORroundcubewebmailMatch0.1beta2
ORroundcubewebmailMatch0.1rc1
ORroundcubewebmailMatch0.1rc2
ORroundcubewebmailMatch0.1stable
ORroundcubewebmailMatch0.1.1
ORroundcubewebmailMatch0.2
ORroundcubewebmailMatch0.2alpha
ORroundcubewebmailMatch0.2beta
ORroundcubewebmailMatch0.2stable
ORroundcubewebmailMatch0.2.1
ORroundcubewebmailMatch0.2.2
ORroundcubewebmailMatch0.3
ORroundcubewebmailMatch0.3beta
ORroundcubewebmailMatch0.3rc1
ORroundcubewebmailMatch0.3stable
ORroundcubewebmailMatch0.3.1
ORroundcubewebmailMatch0.4
ORroundcubewebmailMatch0.4beta
ORroundcubewebmailMatch0.4.1
ORroundcubewebmailMatch0.4.2
ORroundcubewebmailMatch0.5
ORroundcubewebmailMatch0.5beta
ORroundcubewebmailMatch0.5rc
ORroundcubewebmailMatch0.5.1
ORroundcubewebmailMatch0.5.2
ORroundcubewebmailMatch0.5.3
ORroundcubewebmailMatch0.5.4
ORroundcubewebmailMatch0.6
ORroundcubewebmailMatch0.7
ORroundcubewebmailMatch0.7.1
ORroundcubewebmailMatch0.7.2
ORroundcubewebmailMatch0.7.3
ORroundcubewebmailMatch0.8.0
ORroundcubewebmailMatch0.8.1
ORroundcubewebmailMatch0.8.2
ORroundcubewebmailMatch0.8.3
ORroundcubewebmailMatch0.8.4
ORroundcubewebmailMatch0.8.5
ORroundcubewebmailMatch0.8.6
ORroundcubewebmailMatch0.9beta
ORroundcubewebmailMatch0.9rc
ORroundcubewebmailMatch0.9rc2
ORroundcubewebmailMatch0.9.0
ORroundcubewebmailMatch0.9.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| roundcube | webmail | * | cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:*:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:20050811:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:20050820:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:20051007:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:20051021:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:alpha:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:beta:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:beta2:*:*:*:*:*:* |
| roundcube | webmail | 0.1 | cpe:2.3:a:roundcube:webmail:0.1:rc1:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2013-5645
2013-08-29 00:00:00
packetstorm
packetstorm
Roundcube Webmail 0.9.2 Cross Site Scripting
2013-07-18 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : roundcubemail (MDVSA-2013:226)
2013-09-06 00:00:00
openSUSE Security Update : roundcubemail (openSUSE-SU-2013:1420-1)
2014-06-13 00:00:00
debiancve
debiancve
CVE-2013-5645
2013-08-29 12:07:56
cve
cve
CVE-2013-5645
2013-08-29 12:07:56
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0270)
2022-01-28 00:00:00
Roundcube Webmail < 0.9.3 Multiple XSS Vulnerabilities
2019-09-02 00:00:00
prion
prion
Cross site scripting
2013-08-29 12:07:00
mageia
mageia
Updated roundcubemail package fixes security vulnerability
2013-09-03 23:50:40
securityvulns
securityvulns
[ MDVSA-2013:226 ] roundcubemail
2013-09-09 00:00:00
RoundCube crossite scripting
2013-09-09 00:00:00
cvelist
cvelist
CVE-2013-5645
2013-08-29 10:00:00
osv
osv
roundcubemail-1.2.3-1.1 on GA media
2024-06-15 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.3
Confidence
High
EPSS
0.004
Percentile
73.1%
Related for NVD:CVE-2013-5645