Unrated

Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or downlo...

CVE-2023-47272 First seen on SecPulse Nov 5, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2023-47272 roundcube Fixed in: 1.4.15+dfsg.1-1~deb11u2

Original description The description as published by the source.

Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or download).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory nvd.nist.gov
advisory debian.org
patch github.com
web github.com
web github.com
web lists.debian.org

Key facts

Severity: Unrated
Published: Nov 5, 2023
First seen on SecPulse: Nov 5, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:59