CVE-2024-37383

RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

Webmail

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

7. Jun 2024

Ausgewertete Quellen

• Debian
  https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37383
• CISA
  RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
• NVD
  CVE-2024-37383