Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

roundcubemail: cross-site scripting

Package(s):

roundcubemail

CVE #(s):

CVE-2012-1253

Created:

June 22, 2012

Updated:

June 27, 2012

Description:

From the Red Hat Bugzilla entry:

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.

Alerts:

Fedora	FEDORA-2012-9329	2012-06-22
Fedora	FEDORA-2012-9337	2012-06-22

(Log in to post comments)