Łukasz Pilorz

The issue allows for a cross site scripting attack when processing maliciously crafted web content.

Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions prior to 1.3.15 Roundcube Webmail versions prior to 1.4.8 Description: The issue allows stored XSS in HTML messages during message display via a crafted SVG document. This can be exploited by a remote attacker to compromise data integrity. The problem is related to insufficient protection measures for web page structures in the Roundcube Webmail client, specifically in the wash uri function of the rcube washtml.php file. Recommendations: For versions prior to 1.3.15, update to version 1.3.15 or later. For versions prior to 1.4.8, update to version 1.4.8 or later.

The issue is related to errors in security settings, allowing a remote attacker to exploit it by using a specially crafted website to spoof the relationship between URLs and web content. This can lead to the substitution of web page content.

The issue is related to how WebKit in iOS handles "Content-Disposition: attachment" HTTP headers, which could allow man-in-the-middle attackers to obtain sensitive information. Exploitation of this issue may enable a remote attacker to access protected information by conducting man-in-the-middle attacks.

The issue allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks. This is achieved through certain incorrect calls to WebView methods that trigger the use of an `applewebdata:` URL, involving vectors with the `document.write` method.

The issue allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading a file, due to the failure to prevent HTML interpretation of a document served with a text/plain content type.