![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2021-46144 |
Description: | Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.705037 1.3.6.1.4.1.25623.1.0.892878 1.3.6.1.4.1.25623.1.0.147393 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2021-46144 Debian Security Information: DSA-5037 (Google Search) https://www.debian.org/security/2022/dsa-5037 https://bugs.debian.org/1003027 https://github.com/roundcube/roundcubemail/commit/8894fddd59b770399eed4ef8d4da5773913b5bf0 https://github.com/roundcube/roundcubemail/commit/b2400a4b592e3094b6c84e6000d512f99ae0eed8 https://roundcube.net/news/2021/12/30/security-update-1.4.13-released https://roundcube.net/news/2021/12/30/update-1.5.2-released https://lists.debian.org/debian-lts-announce/2022/01/msg00005.html |