admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-31 10:40:54 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-42008.md
0xMarcio 756086a9d1 Update CVE sources 2024-08-27 19:05
2024-08-27 19:05:50 +00:00

804 B
Raw Blame History

CVE-2024-42008

Description

A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header.

POC

Reference

Github

No PoCs found on GitHub currently.