CVE-2012-1253: XSS
Published Jun 4, 2012
·Updated
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.
Affected Software
28 affected components
Roundcube Webmail<=0.6
Roundcube Webmail=0.1
Roundcube Webmail=0.1-alpha
Roundcube Webmail=0.1-beta
Roundcube Webmail=0.1-beta2
Roundcube Webmail=0.1-rc1
Roundcube Webmail=0.1-rc2
Roundcube Webmail=0.1.1
Roundcube Webmail=0.2
Roundcube Webmail=0.2-alpha
Roundcube Webmail=0.2-beta
Roundcube Webmail=0.2.1
Roundcube Webmail=0.2.2
Roundcube Webmail=0.3
Roundcube Webmail=0.3-beta
Roundcube Webmail=0.3-rc1
Roundcube Webmail=0.3.1
Roundcube Webmail=0.4
Roundcube Webmail=0.4-beta
Roundcube Webmail=0.4.1
Roundcube Webmail=0.4.2
Roundcube Webmail=0.5
Roundcube Webmail=0.5-beta
Roundcube Webmail=0.5-rc
Roundcube Webmail=0.5.1
Roundcube Webmail=0.5.2
Roundcube Webmail=0.5.3
Roundcube Webmail=0.5.4
Event History
Jun 4, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1253?
CVE-2012-1253 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2012-1253?
To fix CVE-2012-1253, upgrade Roundcube Webmail to version 0.7 or later.
3
What software versions are affected by CVE-2012-1253?
CVE-2012-1253 affects Roundcube Webmail versions prior to 0.7, including versions 0.6 and earlier.
4
What type of vulnerability is CVE-2012-1253?
CVE-2012-1253 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
5
In which browsers is CVE-2012-1253 exploitable?
CVE-2012-1253 is specifically exploitable when using Internet Explorer.