Unrated

mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in rendered e-ma...

CVE-2024-42010 First seen on SecPulse Aug 5, 2024

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-42010 roundcube Fixed in: 1.4.15+dfsg.1-1+deb11u4

Original description The description as published by the source.

mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in rendered e-mail messages, allowing a remote attacker to obtain sensitive information.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package github.com
web github.com
web github.com
web roundcube.net
web sonarsource.com

Key facts

Severity: Unrated
Published: Aug 5, 2024
First seen on SecPulse: Aug 5, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04