CVE-2025-68461

RoundCube Webmail Cross-site Scripting Vulnerability

Webmail

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.

18. Dez 2025

Ausgewertete Quellen

• Hersteller
  https://roundcube.net/news/2025/12/13/security-updates-1.6.12-and-1.5.12
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-68461
• CISA
  RoundCube Webmail Cross-site Scripting Vulnerability
• NVD
  CVE-2025-68461