Lucene search

RedosROS-20240618-01

HistoryJun 18, 2024 - 12:00 a.m.

ROS-20240618-01

2024-06-1800:00:00

redos.red-soft.ru

vulnerability

svg handler

user preferences

roundcube

cross-site scripting

remote exploitation

xss

animation

attributes

lists

unix

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

A vulnerability in the SVG Handler component of the RoundCube email client is related to cross-site scripting attacks.
Exploitation of the vulnerability could allow an attacker acting remotely to exploit XSS via the
SVG animation attributes.

Vulnerability in the User Preferences Handler component of the RoundCube email client is related to cross-site scripting attacks.
scripting attacks. Exploitation of the vulnerability could allow an attacker acting remotely,
exploit XSS via list columns from user preferences

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64roundcubemail<= 1.5.7-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
redos	7.3	x86_64	roundcubemail	<= 1.5.7-1	UNKNOWN