CVE-2021-46144
Summary
| CVE | CVE-2021-46144 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-01-06 05:15:00 UTC |
|---|
| Updated | 2022-04-01 15:21:00 UTC |
|---|
| Description | Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Security: Fix cross-site scripting (XSS) via HTML messages with malic… · roundcube/roundcubemail@b2400a4 · GitHub |
MISC |
github.com |
|
| Security update 1.4.13 released |
MISC |
roundcube.net |
|
| Debian -- Security Information -- DSA-5037-1 roundcube |
DEBIAN |
www.debian.org |
|
| Update 1.5.2 released |
MISC |
roundcube.net |
|
| #1003027 - roundcube: XSS vulnerability via HTML messages with malicious CSS content - Debian Bug report logs |
MISC |
bugs.debian.org |
|
| Security: Fix cross-site scripting (XSS) via HTML messages with malic… · roundcube/roundcubemail@8894fdd · GitHub |
MISC |
github.com |
|
| [SECURITY] [DLA 2878-1] roundcube security update |
MLIST |
lists.debian.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 178988 Debian Security Update for roundcube (DSA 5037-1)
- 178997 Debian Security Update for roundcube (DLA 2878-1)
- 183244 Debian Security Update for roundcube (CVE-2021-46144)
