Lucene search
GoogleOSV:CVE-2020-12625HistoryMay 04, 2020 - 2:15 a.m.
CVE-2020-12625
2020-05-0402:15:11
Google
osv.dev
3
An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.
References
lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html
github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12625-Cross%20Site-Scripting%20via%20Malicious%20HTML%20Attachment-Roundcube
github.com/roundcube/roundcubemail/commit/87e4cd0cf2c550e77586860b94e5c75d2b7686d0
github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4
github.com/roundcube/roundcubemail/releases/tag/1.4.4
security.gentoo.org/glsa/202007-41
www.debian.org/security/2020/dsa-4674
Related
cve
cve
CVE-2020-12625
2020-05-04 02:15:11
debiancve
debiancve
CVE-2020-12625
2020-05-04 02:15:11
prion
prion
Cross site scripting
2020-05-04 02:15:00
cvelist
cvelist
CVE-2020-12625
2020-05-04 01:57:31
nvd
nvd
CVE-2020-12625
2020-05-04 02:15:11
osv
osv
BIT-roundcube-2020-12625
2024-03-06 11:06:32
roundcube - security update
2020-05-05 00:00:00
roundcube vulnerabilities
2022-08-08 06:30:29
ubuntucve
ubuntucve
CVE-2020-12625
2020-05-04 00:00:00
debian
debian
[SECURITY] [DSA 4674-1] roundcube security update
2020-05-05 13:32:26
[SECURITY] [DSA 4674-1] roundcube security update
2020-05-05 13:32:26
openvas
openvas
Debian: Security Advisory (DSA-4674-1)
2020-05-06 00:00:00
Mageia: Security Advisory (MGASA-2020-0206)
2022-01-28 00:00:00
nessus
nessus
Debian DSA-4674-1 : roundcube - security update
2020-05-07 00:00:00
GLSA-202007-41 : Roundcube: Multiple vulnerabilities
2020-07-27 00:00:00
openSUSE Security Update : roundcubemail (openSUSE-2020-1516)
2020-09-30 00:00:00
mageia
mageia
Updated roundcubemail packages fix security vulnerabilities
2020-05-08 13:57:54
gentoo
gentoo
Roundcube: Multiple vulnerabilities
2020-07-27 00:00:00
suse
suse
Security update for roundcubemail (moderate)
2020-09-24 00:00:00
ubuntu
ubuntu
Roundcube Webmail vulnerabilities
2022-08-08 00:00:00