vulnerability

Ubuntu: USN-5182-1 (CVE-2021-44025): Roundcube Webmail vulnerabilities

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Nov 19, 2021
Added
Mar 22, 2023
Modified
Nov 15, 2024

Description

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message.

Solution(s)

ubuntu-pro-upgrade-roundcubeubuntu-pro-upgrade-roundcube-core
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.