THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-37383

Assignermitre
Reserved2024-06-07
Published2024-06-07
Updated2024-06-17

Description

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

References

https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242

https://github.com/roundcube/roundcubemail/releases/tag/1.6.7

https://github.com/roundcube/roundcubemail/releases/tag/1.5.7

https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html ([debian-lts-announce] 20240617 [SECURITY] [DLA 3835-1] roundcube security update) mailing-list

cve.org CVE-2024-37383

nvd.nist.gov CVE-2024-37383

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-37383
Find us on
Data Privacy
Terms of Use
Logo BSI Allianz für Cyber-Sicherheit
© Copyright 2024 THREATINT. Made in Cyprus with ❤ + ☼