Lucene search
+L

3 matches found

Mageia
Mageia
added 2021/03/12 1:25 a.m.49 views

Updated roundcubemail package fixes security vulnerability

This update fixes cross-site scripting XSS via HTML messages with malicious CSS content CVE-2021-26925...

5.4CVSS0.5AI score0.01006EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/09 9:15 a.m.18 views

CVE-2021-26925

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets CSS token sequences during HTML email rendering...

5.4CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 2021/02/09 8:53 a.m.88 views

CVE-2021-26925

CVE-2021-26925 affects Roundcube Webmail prior to 1.4.11, enabling cross-site scripting via crafted CSS token sequences while rendering HTML emails. Public advisories (Mageia/Fedora) confirm the fix in 1.4.11. Remediate by upgrading Roundcube to 1.4.11 or newer; exploitation status is not describ...

5.4CVSS5AI score0.01006EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder