CVE-2024-37384

Related Files

Ubuntu Security Notice USN-6848-1

Posted Jun 26, 2024

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6848-1 - Matthieu Faou and Denys Klymenko discovered that Roundcube incorrectly handled certain SVG images. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10. Rene Rehme discovered that Roundcube incorrectly handled certain headers. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10.

tags | advisory, remote, arbitrary, javascript

systems | linux, ubuntu

advisories | CVE-2023-47272, CVE-2023-5631, CVE-2024-37383, CVE-2024-37384

SHA-256 | 6806c53c3241b7542421db1f1d4222c2a53699435aca3668ff2429b7404c20a5

Download | Favorite | View

Debian Security Advisory 5714-1

Posted Jun 19, 2024

Authored by Debian | Site debian.org

CrowdStrike discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not correctly process and sanitize requests. This would allow an attacker to perform Cross-Side Scripting (XSS) attacks.

tags | advisory, imap

systems | linux, debian

advisories | CVE-2024-37383, CVE-2024-37384

SHA-256 | 76f384d98ec58b42d0845da5a6f6ff864308dde40b2b6c466e6e929407bc0f85

Download | Favorite | View