CVE-2015-8864
13.04.2017, 14:59
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068.
| Vendor | Product | Version |
|---|---|---|
| opensuse | leap | 42.1 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
| roundcube | roundcube_webmail | 1.1.1 |
| roundcube | roundcube_webmail | 1.1.2 |
| roundcube | roundcube_webmail | 1.1.3 |
| roundcube | webmail | 𝑥 ≤ 1.0.8 |
| roundcube | webmail | 1.1 |
| roundcube | webmail | 1.1:beta |
| roundcube | webmail | 1.1:rc |
| roundcube | webmail | 1.1.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References