CVE-2020-35730

Medium

Open

KEV

TLP:CLEAR

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Roundcube — Roundcube Webmail — Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.

Details

EPSS Score ⓘ: 32.69%

98.2th percentile
Confidence: 100%
CISA KEV
Date Added: Jun 22, 2023
Patch Due: Jul 13, 2023
Required Action: Apply updates per vendor instructions.

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.