Lucene search
Veracode Vulnerability DatabaseVERACODE:28571HistoryDec 11, 2020 - 9:26 a.m.
Cross-Site Scripting (XSS)
2020-12-1109:26:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
squirrelmail
xss
vulnerability
html e-mail
handling
application context
EPSS
0.01
Percentile
83.8%
SquirrelMail is vulnerable to cross-site scripting. The vulnerability is possible through bypassing the buit-in sanitization due to improper handling of RCDATA and RAWTEXT type elements. An attacker may execute malicious script content from HTML e-mail within the application context.
References
packetstormsecurity.com/files/153495/SquirrelMail-1.4.22-Cross-Site-Scripting.html
git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2019-12970
lists.debian.org/debian-lts-announce/2019/08/msg00000.html
seclists.org/bugtraq/2019/Jul/0
seclists.org/bugtraq/2019/Jul/50
www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-016.txt
Related
osv
osv
squirrelmail - security update
2019-08-01 00:00:00
squirrelmail vulnerability
2020-12-10 14:28:20
cvelist
cvelist
CVE-2019-12970
2019-07-01 10:32:05
openvas
openvas
Ubuntu: Security Advisory (USN-4669-1)
2020-12-11 00:00:00
Debian: Security Advisory (DLA-1868-1)
2019-08-02 00:00:00
Mageia: Security Advisory (MGASA-2021-0010)
2022-01-28 00:00:00
redhatcve
redhatcve
CVE-2019-12970
2019-07-03 04:52:12
nessus
nessus
Ubuntu 16.04 LTS : SquirrelMail vulnerability (USN-4669-1)
2020-12-10 00:00:00
Debian DLA-1868-1 : squirrelmail security update
2019-08-12 00:00:00
RHEL 5 : squirrelmail (Unpatched Vulnerability)
2024-05-11 00:00:00
mageia
mageia
Updated squirrelmail packages fix security vulnerabilities
2021-01-08 18:34:55
nvd
nvd
CVE-2019-12970
2019-07-01 11:15:09
prion
prion
Design/Logic Flaw
2019-07-01 11:15:00
cve
cve
CVE-2019-12970
2019-07-01 11:15:09
ubuntucve
ubuntucve
CVE-2019-12970
2019-07-01 00:00:00
debian
debian
[SECURITY] [DLA 1868-1] squirrelmail security update
2019-08-01 12:55:45
ubuntu
ubuntu
SquirrelMail vulnerability
2020-12-10 00:00:00
packetstorm
packetstorm
SquirrelMail 1.4.22 Cross Site Scripting
2019-07-01 00:00:00