FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Roundcube -- XSS vulnerability

Affected packages
roundcube < 1.6.3,1

Details

VuXML ID b5508c08-547a-11ee-85eb-84a93843eb75
Discovery 2023-09-15
Entry 2023-09-16

The Roundcube webmail project reports:

cross-site scripting (XSS) vulnerability in handling of linkrefs in plain text messages

References

URL https://roundcube.net/news/2023/09/15/security-update-1.6.3-released