Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

roundcubemail: cross-site scripting

Package(s):

roundcubemail

CVE #(s):

CVE-2012-4668

Created:

October 11, 2012

Updated:

October 17, 2012

Description:

From the Mageia advisory:

Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email (CVE-2012-4668).

Alerts:

Mageia	MGASA-2012-0292	2012-10-11
Mandriva	MDVSA-2013:148	2013-04-22

(Log in to post comments)