CVE-2023-5631

KEV

Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

View CVE record →

Vendor / Project: Roundcube
Product: Webmail
Date added: Oct 26, 2023
Due date: Nov 16, 2023
Known ransomware use: Unknown
CWEs: CWE-79

Description

Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes