[SECURITY] Fedora 29 Update: roundcubemail-1.3.8-1.fc29

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Fedora 27 : roundcubemail (2018-d527206a77)

Version 1.3.8 This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability plus updates to ensure compatibility with PHP 7.3 and recent versions of...

[SECURITY] Fedora 28 Update: roundcubemail-1.3.8-1.fc28

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 27 Update: roundcubemail-1.3.8-1.fc27

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

PT-2018-14862

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.3.8 ALT Linux affected versions not specified Description The issue allows for XSS via crafted use of , as demonstrated by an onload attribute in a BODY element, within an HTML attachment. This can lead to potenti...

PT-2018-14861

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.3.7 Description The issue makes it easier for attackers to obtain sensitive information by mishandling GnuPG MDC integrity-protection warnings. This is related to the handling of encryption and decryption processe...

Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting

Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting Exploit Title: Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting Date: 2018-09-09 Exploit Author: Fahimeh Rezaei Vendor Homepage: https://plugins.roundcube.net/packages/eagle00789/rcfilters Software Link:...

Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting Vulnerability

Exploit for linux platform in category web applications Exploit Title: Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting Exploit Author: Fahimeh Rezaei Vendor Homepage: https://plugins.roundcube.net/packages/eagle00789/rcfilters Software Link:...

Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting

Exploit Title: Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting Date: 2018-09-09 Exploit Author: Fahimeh Rezaei Vendor Homepage: https://plugins.roundcube.net/packages/eagle00789/rcfilters Software Link: https://plugins.roundcube.net/packages/eagle00789/rcfilters Version: rcfilters plugin...

Roundcube rcfilters 2.1.6 Cross Site Scripting

Exploit Title: Roundcube rcfilters plugin 2.1.6 - Cross-Site Scripting Date: 2018-09-09 Exploit Author: Fahimeh Rezaei Vendor Homepage: https://plugins.roundcube.net/packages/eagle00789/rcfilters Software Link: https://plugins.roundcube.net/packages/eagle00789/rcfilters Version: rcfilters plugin...

Cross site scripting

In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the whatfilter and messages parameters in the Filters section of the settings...

CVE-2018-16736

In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the whatfilter and messages parameters in the Filters section of the settings...

CVE-2018-16736

In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the whatfilter and messages parameters in the Filters section of the settings...

CVE-2018-16736

In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the whatfilter and messages parameters in the Filters section of the settings...

CVE-2018-16736

In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the whatfilter and messages parameters in the Filters section of the settings...

CVE-2018-16736

CVE-2018-16736 affects the Roundcube rcfilters plugin (v2.1.6). The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the _whatfilter and _messages parameters in the Filters settings. Documented impact is cross-site scripting, with NVD listing CVSS v2 base score 3.5 (LOW) and CVSS v3...

PT-2018-13712

Name of the Vulnerable Software and Affected Versions Roundcube rcfilters plugin version 2.1.6 Description The issue exists in the Filters section of the settings, where XSS can be triggered via the whatfilter and messages parameters. Recommendations For Roundcube rcfilters plugin version 2.1.6,...

CVE-2018-16736: Improper Neutralization of Input During Web Page Generation

In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the whatfilter and messages parameters in the Filters section of the settings...

Roundcube Webmail < 1.3.7 Enigma Plugin PGP Vulnerability (EFAIL)

Roundcube Webmail is prone to an information disclosure vulnerability in the Enigma Plugin. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

MGASA-2018-0288 Updated roundcubemail packages fix security vulnerability

Updated roundcubemail package fixes security vulnerability: This update fixes a recently discovered IMAP command injection vulnerability caused by insufficient input validation within the archive plugin. CVE-2018-9846...