THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-37383

Assigner:mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca)
Reserved:2024-06-07
Published:2024-06-07
Updated:2024-06-17

Description

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

References

https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242

https://github.com/roundcube/roundcubemail/releases/tag/1.6.7

https://github.com/roundcube/roundcubemail/releases/tag/1.5.7

https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html ([debian-lts-announce] 20240617 [SECURITY] [DLA 3835-1] roundcube security update) mailing-list

cve.org CVE-2024-37383

nvd.nist.gov CVE-2024-37383

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-37383