ROS-20240826-17

Vulnerability in DecodeConfig component of Golang programming language is related to uncontrolled consumption of resources.
resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial-of-service condition.
denial of service

Vulnerability of rcmail_action_mail_get->run() function of RoundCube Webmail mail client exists due to
failure to take measures to protect the structure of the web page. Exploitation of the vulnerability could allow an attacker,
acting remotely, to conduct a cross-site scripting (XSS) attack by sending specially crafted
malicious attachments

Vulnerability in the message_body() function of the program/actions/mail/show.php file of the RoundCube email client
Webmail exists due to failure to take measures to protect the structure of the web page. Exploitation of the vulnerability could
allow an attacker acting remotely to gain full access to the e-mail by sending a
specially crafted message