Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia: 2020-0339 Moderate: Fix for XSS Vulnerability in RoundcubeMail

mageia
Calendar Grey August 18, 2020
Dist Mageia Esm H88
Revised roundcubemail components for Mageia address cross-site scripting vulnerabilities identified on September 10, 2021.
Fix potential XSS issue in HTML editor of the identity signature input Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145] Fix cross-site s...

Summary

Fix potential XSS issue in HTML editor of the identity signature input Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145] Fix cross-site scripting (XSS) via HTML messages with malicious math content

References

- https://bugs.mageia.org/show_bug.cgi?id=27079

- https://github.com/roundcube/roundcubemail/releases/tag/1.3.15

- https://www.cve.org/CVERecord?id=CVE-2020-16145

Topics%20covered

Topics Covered

security advisory xss malicious content roundcubemail mageia html messages

Resolution

SRPMS

- 7/core/roundcubemail-1.3.15-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 18 Aug 2020
URL: https://advisories.mageia.org/MGASA-2020-0339.html
Type: security
CVE: CVE-2020-16145

Topics%20covered

Topics Covered

security advisory xss malicious content roundcubemail mageia html messages

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here