roundcube/roundcubemail vulnerabilities (Packagist)
10 vulnerabilities.
-
roundcube/roundcubemailPackagist Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail message 5.3 Medium -
roundcube/roundcubemailPackagist Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages 5.3 Medium -
roundcube/roundcubemailPackagist Roundcube Webmail: Bypass of remote image blocking via SVG content (with animate attributes) in an e-mail message 5.3 Medium -
roundcube/roundcubemailPackagist Roundcube: Bypass of remote image blocking via crafted BODY background attribute 5.3 Medium -
roundcube/roundcubemailPackagist Roundcube Webmail: Incorrect password comparison in the password plugin 4.2 Medium -
roundcube/roundcubemailPackagist Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages 5.4 Medium -
roundcube/roundcubemailPackagist Roundcube Webmail: Insufficient HTML attachment sanitization in preview mode 6.1 Medium -
roundcube/roundcubemailPackagist Roundcube Webmail: Unsanitized IMAP SEARCH command arguments 3.1 Low -
roundcube/roundcubemailPackagist Roundcube Webmail: Unsafe deserialization in the redis/memcache session handler 3.7 Low -
roundcube/roundcubemailPackagist Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization 9.9 Critical