PT-2020-4099 · Roundcube+4 · Roundcube Webmail+4

Łukasz Pilorz · Published 2019-11-09 · Updated 2024-06-15 · CVE-2020-16145

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions prior to 1.3.15 Roundcube Webmail versions prior to 1.4.8

Description: The issue allows stored XSS in HTML messages during message display via a crafted SVG document. This can be exploited by a remote attacker to compromise data integrity. The problem is related to insufficient protection measures for web page structures in the Roundcube Webmail client, specifically in the wash uri function of the rcube washtml.php file.

Recommendations: For versions prior to 1.3.15, update to version 1.3.15 or later. For versions prior to 1.4.8, update to version 1.4.8 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2019-3109

ALT-PU-2020-2518

ALT-PU-2020-2554

BDU:2020-04501

BIT-ROUNDCUBE-2020-16145

CVE-2020-16145

DLA-2322-1

DSA-4744-1

MGASA-2020-0339

OPENSUSE-SU-2020:1516-1

OPENSUSE-SU-2020_1516-1

OPENSUSE-SU-2022:10148-1

OPENSUSE-SU-2024:11303-1

USN-5182-1

Affected Products

Alt Linux

Linuxmint

Roundcube Webmail

Suse

Ubuntu

References · 73

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12625-Cross%20Site-Scripting%20via%20Malicious%20HTML%20Attachment-Roundcube · Exploit
• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube · Exploit
• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12640-PHP%20Local%20File%20Inclusion-Roundcube · Exploit
• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12641-Command%20Injection-Roundcube · Exploit
• 🔥 https://github.com/pentesttoolscom/roundcube-cve-2021-44026 · Exploit
• https://github.com/roundcube/roundcubemail/commit/a71bf2e8d4a64ff2c83fdabc1e8cb0c045a41ef4 · Patch
• https://github.com/roundcube/roundcubemail/commit/d44ca2308a96576b88d6bf27528964d4fe1a6b8b#diff-d3bb3391c79904494c60ee2ac2f33070 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:11303-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DAXK3565NYK4OEZVTW6S5LEVIDQEY2E · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-16145 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:1516-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-roundcube-2020-16145 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-16145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13964 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5182-1 · Vendor Advisory