CVE-2023-5631

Related Files

Ubuntu Security Notice USN-6848-1

Posted Jun 26, 2024

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6848-1 - Matthieu Faou and Denys Klymenko discovered that Roundcube incorrectly handled certain SVG images. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10. Rene Rehme discovered that Roundcube incorrectly handled certain headers. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10.

tags | advisory, remote, arbitrary, javascript

systems | linux, ubuntu

advisories | CVE-2023-47272, CVE-2023-5631, CVE-2024-37383, CVE-2024-37384

SHA-256 | 6806c53c3241b7542421db1f1d4222c2a53699435aca3668ff2429b7404c20a5

Download | Favorite | View

Debian Security Advisory 5531-1

Posted Oct 23, 2023

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5531-1 - It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attacker to load arbitrary JavaScript code.

tags | advisory, arbitrary, javascript, imap

systems | linux, debian

advisories | CVE-2023-5631

SHA-256 | 961824a129d751981518c8ecfbe654d441e2922aec3a9645d77dae20b42b7ecd

Download | Favorite | View