tocsin

Debian/roundcube: unknown

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedd

Action: Upgrade roundcube to 0.7-1 or later.

Affected

introducedfixedlast affected
00.7-1-

Fixed versions

0.7-1

Sources

published · modified · JSON