ROS-20240618-01

🗓️ 18 Jun 2024 00:00:00Reported by RedosType

A vulnerability in SVG and User Preferences Handlers of RoundCube email client could allow remote attackers to exploit cross-site scripting via animation attributes and user preferences lists

Reporter	Title	Published	Views	Family All 71
0day.today	Roundcube Webmail Stored XSS Exploit	27 Nov 202400:00	–	zdt
GithubExploit	Exploit for Cross-site Scripting in Roundcube Webmail	3 Nov 202407:16	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Roundcube Webmail	24 Oct 202404:01	–	githubexploit
ATTACKERKB	CVE-2024-37383	7 Jun 202400:00	–	attackerkb
Information Security Automation	About Cross Site Scripting – Roundcube Webmail (CVE-2024-37383) vulnerability	15 Oct 202412:21	–	avleonov
Information Security Automation	September episode of “In The Trend of VM”: 7 CVEs, fake reCAPTCHA, lebanese pagers, VM and IT annual bonuses	21 Oct 202413:01	–	avleonov
BDU FSTEC	The vulnerability of the RoundCube Webmail email client stems from insufficient protection of the website’s structure, allowing attackers to carry out cross-site scripting attacks.	10 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RoundCube Webmail email client stems from insufficient protection of the website’s structure, allowing attackers to carry out cross-site scripting attacks.	10 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-37383	16 Oct 202412:35	–	circl
CISA KEV Catalog	RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability	24 Oct 202400:00	–	cisa_kev