PT-2015-7937 · Roundcube · Roundcubemail

Published 2015-11-07 · Updated 2015-11-07

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions roundcubemail versions prior to 1.0.7

Description A XSS issue was found in drag-n-drop file uploads.

Recommendations For versions prior to 1.0.7, update to version 1.0.7 to resolve the issue.

Related Identifiers

MGASA-2015-0438

Affected Products

Roundcubemail

References · 5

• https://advisories.mageia.org/MGASA-2015-0438.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0438 · Vendor Advisory
• https://github.com/roundcube/roundcubemail/releases/tag/1.0.7 · Note
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00030.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=17085 · Note