PT-2018-19292

Published

2018-11-21

·

Updated

2018-11-21

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions Roundcube Webmail version 1.3
Description A security issue has been reported in Roundcube Webmail, related to the handling of invalid style tag content, which can lead to an XSS issue. This release also includes fixes for several bugs and updates for compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot, and MySQL 8.
Recommendations For Roundcube Webmail version 1.3, update to the latest service release to fix the security issue and apply the other fixes and compatibility updates.
Vendors
Affected products
Related identifiers
MGASA-2018-0463
Found an issue in the description? Have something to add? Feel free to write us 👾