PT-2015-7937 · Roundcube · Roundcubemail

Publicado 2015-11-07 · Atualizado 2015-11-07

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions roundcubemail versions prior to 1.0.7

Description A XSS issue was found in drag-n-drop file uploads.

Recommendations For versions prior to 1.0.7, update to version 1.0.7 to resolve the issue.

Identificadores relacionados

MGASA-2015-0438

Produtos afetados

Roundcubemail

Referências · 5

• https://github.com/roundcube/roundcubemail/releases/tag/1.0.7 · Nota
• https://advisories.mageia.org/MGASA-2015-0438.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2015-0438 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00030.html · Nota
• https://bugs.mageia.org/show_bug.cgi?id=17085 · Nota