Lucene search

K

GoogleOSV:CVE-2016-4068

HistoryApr 13, 2017 - 2:59 p.m.

CVE-2016-4068

2017-04-1314:59:01

Google

osv.dev

6

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.4%

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2015-8864.

CPENameOperatorVersion
roundcubemaileq1.1-rc
roundcubemaileq1.0-beta
roundcubemaileq0.1-beta2
roundcubemaileq1.2-beta
roundcubemaileq1.1-beta
roundcubemaileq1.1.0

References

lists.opensuse.org/opensuse-updates/2016-08/msg00078.html

lists.opensuse.org/opensuse-updates/2016-08/msg00079.html

lists.opensuse.org/opensuse-updates/2016-08/msg00095.html

github.com/roundcube/roundcubemail/commit/40d7342dd9c9bd2a1d613edc848ed95a4d71aa18#commitcomment-15294218

github.com/roundcube/roundcubemail/issues/4949

github.com/roundcube/roundcubemail/releases/tag/1.0.9

github.com/roundcube/roundcubemail/releases/tag/1.1.5

github.com/roundcube/roundcubemail/wiki/Changelog#release-115

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.4%

Related for OSV:CVE-2016-4068

prion2 nvd3 cve3 ubuntucve2 debian1 nessus7 openvas4 cvelist2 debiancve2 fedora3 osv1 mageia1