VDB
BDU%3A2021-01759
BDU%3A2021-01759
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Уязвимость функции linkref_addindex компонента rcube_string_replacer.php почтового клиента Roundcube, связанная с недостатками используемых мер по защите структур веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project, Thomas Brderli | Debian GNU/Linux, Fedora, Roundcube |
Timeline
- Mar 30, 2021 CVE Published
- Sep 24, 2024 CVE Updated
References
- https://github.com/roundcube/roundcubemail/releases/tag/1.2.13 url
- https://github.com/roundcube/roundcubemail/releases/tag/1.3.16 url
- https://github.com/roundcube/roundcubemail/releases/tag/1.4.10 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCEU4BM5WGIDJWP6Z4PCH62ZMH57QYM2/ url
- https://nvd.nist.gov/vuln/detail/CVE-2020-35730 url
- https://security-tracker.debian.org/tracker/CVE-2020-35730 url
- https://www.alexbirnberg.com/roundcube-xss.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HMLIZWKMTRCLU7KZLEQHELS4INXJ7X5Q/ advisory