RoundCube Webmail 'href' Email Body HTML-injection Vulnerability

Bugtraq ID:	55051
Class:	Input Validation Error
CVE:	CVE-2012-3508
Remote:	Yes
Local:	No
Published:	Aug 16 2012 12:00AM
Updated:	Mar 19 2015 09:38AM
Credit:	Shai rod
Vulnerable:
Not Vulnerable:

RoundCube Webmail 'href' Email Body HTML-injection Vulnerability

RoundCube Webmail is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

Successful exploit will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

RoundCube Webmail 0.8.0 is vulnerable; other versions may also be affected.

RoundCube Webmail 'href' Email Body HTML-injection Vulnerability

Attackers can use a browser to exploit this issue.

The following exploit is available:

• /data/vulnerabilities/exploits/55051.py

RoundCube Webmail 'href' Email Body HTML-injection Vulnerability

Solution:
Updates are available; please see the references for more information.

RoundCube Webmail 'href' Email Body HTML-injection Vulnerability

References:

• Roundcube Homepage (Roundcube)