Lucene search

K
mageiaGentoo FoundationMGASA-2013-0270
HistorySep 03, 2013 - 11:50 p.m.

Updated roundcubemail package fixes security vulnerability

2013-09-0323:50:40
Gentoo Foundation
advisories.mageia.org
15

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

73.1%

XSS vulnerabilities when saving HTML signatures and when editing a message “as new” or draft in roundcubemail before 0.9.3 (CVE-2013-5645).

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

73.1%