2024-07-03 04:04:51 +00:00

49 lines
1.3 KiB
JSON

{
"id": "CVE-2024-37384",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-06-07T04:15:30.597",
"lastModified": "2024-07-03T02:04:17.060",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user preferences."
},
{
"lang": "es",
"value": "Roundcube Webmail anterior a 1.5.7 y 1.6.x anterior a 1.6.7 permite XSS a trav\u00e9s de columnas de lista de las preferencias del usuario."
}
],
"metrics": {},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/roundcube/roundcubemail/commit/cde4522c5c95f13c6aeeb1600ab17e5067a536f7",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7",
"source": "cve@mitre.org"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html",
"source": "cve@mitre.org"
}
]
}