Description
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| debian_linux | debian / debian_linux | 10 | affected |
| n/a | n/a / n/a | n/a | affected |
| webmail | roundcube / webmail | >= 0, < 1.4.14 | affected |
| webmail | roundcube / webmail | >= 1.5.0, < 1.5.4 | affected |
| webmail | roundcube / webmail | >= 1.6.0, < 1.6.3 | affected |