CVE-2009-0413: XSS

Published Feb 3, 2009

Updated

Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message.

Affected Software

1 affected component

Roundcube Webmail=0.2

Event History

Feb 3, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Data Sourced

via NVD·11:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0413?

CVE-2009-0413 is classified as a medium severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2009-0413?

To fix CVE-2009-0413, upgrade to a more recent, secure version of RoundCube Webmail that has addressed this vulnerability.

What type of attacks can be performed using CVE-2009-0413?

CVE-2009-0413 can allow remote attackers to inject arbitrary web scripts or HTML into email messages viewed by users.

Which version of RoundCube is affected by CVE-2009-0413?

CVE-2009-0413 specifically affects RoundCube Webmail version 0.2.

Is CVE-2009-0413 commonly exploited in the wild?

While specific exploitation data for CVE-2009-0413 may vary, XSS vulnerabilities like this are commonly targeted by attackers in web applications.