CVE-2023-47272

Related Files

Ubuntu Security Notice USN-6848-1

Posted Jun 26, 2024

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6848-1 - Matthieu Faou and Denys Klymenko discovered that Roundcube incorrectly handled certain SVG images. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10. Rene Rehme discovered that Roundcube incorrectly handled certain headers. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10.

tags | advisory, remote, arbitrary, javascript

systems | linux, ubuntu

advisories | CVE-2023-47272, CVE-2023-5631, CVE-2024-37383, CVE-2024-37384

SHA-256 | 6806c53c3241b7542421db1f1d4222c2a53699435aca3668ff2429b7404c20a5

Download | Favorite | View

Debian Security Advisory 5572-1

Posted Dec 4, 2023

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5572-1 - Rene Rehme discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly set headers when handling attachments. This would allow an attacker to load arbitrary JavaScript code.

tags | advisory, arbitrary, javascript, imap

systems | linux, debian

advisories | CVE-2023-47272

SHA-256 | 7488c1f8cb39c45a8e6fb8d221877649d21afc6a14f9c3eceb2b735b03ccc617

Download | Favorite | View