PT-2020-3641 · Roundcube+3 · Roundcube Webmail+3

Lorexxar + 1 · Published 2019-11-09 · Updated 2024-03-06 · CVE-2020-13964

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.3.12 Roundcube Webmail versions 1.4.x prior to 1.4.5

Description The issue is related to insufficient protection measures for web page structures in Roundcube Webmail, allowing a remote attacker to impact data integrity. The problem is specifically with the username template object in include/rcmail output html.php, which allows for XSS attacks.

Recommendations For Roundcube Webmail versions prior to 1.3.12, update to version 1.3.12 or later. For Roundcube Webmail versions 1.4.x prior to 1.4.5, update to version 1.4.5 or later. As a temporary workaround, consider restricting access to the include/rcmail output html.php file until a patch is available. Avoid using the username template object in the affected API endpoints until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2019-3109

ALT-PU-2020-2097

ALT-PU-2020-2367

BDU:2020-03989

BIT-ROUNDCUBE-2020-13964

CVE-2020-13964

DSA-4700-1

MGASA-2020-0261

USN-5182-1

Affected Products

Alt Linux

Linuxmint

Roundcube Webmail

Ubuntu

References · 42

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12625-Cross%20Site-Scripting%20via%20Malicious%20HTML%20Attachment-Roundcube · Exploit
• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12641-Command%20Injection-Roundcube · Exploit
• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube · Exploit
• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12640-PHP%20Local%20File%20Inclusion-Roundcube · Exploit
• 🔥 https://github.com/pentesttoolscom/roundcube-cve-2021-44026 · Exploit
• https://github.com/roundcube/roundcubemail/commit/37e2bc745723ef6322f0f785aefd0b9313a40f19 · Patch
• https://bdu.fstec.ru/vul/2020-03989 · Security Note
• https://ubuntu.com/security/CVE-2020-15562 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/ODPJXBHZ32QSP4MYT2OBCALYXSUJ47SK · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13964 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5182-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13964 · Security Note
• https://debian.org/security/2020/dsa-4700 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-13964 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-44025 · Vendor Advisory