CVE-2012-4668: XSS
Published Aug 25, 2012
·Updated
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email.
Affected Software
34 affected components
Roundcube Webmail<=0.8.1
Roundcube Webmail=0.1
Roundcube Webmail=0.1-alpha
Roundcube Webmail=0.1-beta
Roundcube Webmail=0.1-beta2
Roundcube Webmail=0.1-rc1
Roundcube Webmail=0.1-rc2
Roundcube Webmail=0.1.1
Roundcube Webmail=0.2
Roundcube Webmail=0.2-alpha
Roundcube Webmail=0.2-beta
Roundcube Webmail=0.2.1
Roundcube Webmail=0.2.2
Roundcube Webmail=0.3
Roundcube Webmail=0.3-beta
Roundcube Webmail=0.3-rc1
Roundcube Webmail=0.3.1
Roundcube Webmail=0.4
Roundcube Webmail=0.4-beta
Roundcube Webmail=0.4.1
Roundcube Webmail=0.4.2
Roundcube Webmail=0.5
Roundcube Webmail=0.5-beta
Roundcube Webmail=0.5-rc
Roundcube Webmail=0.5.1
Roundcube Webmail=0.5.2
Roundcube Webmail=0.5.3
Roundcube Webmail=0.5.4
Roundcube Webmail=0.6
Roundcube Webmail=0.7
Roundcube Webmail=0.7.1
Roundcube Webmail=0.7.2
Roundcube Webmail=0.7.3
Roundcube Webmail=0.8.0
Remediation
Event History
Aug 25, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4668?
The severity of CVE-2012-4668 is classified as medium due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2012-4668?
To fix CVE-2012-4668, upgrade Roundcube Webmail to version 0.8.2 or later.
3
Who is affected by CVE-2012-4668?
CVE-2012-4668 affects users of Roundcube Webmail versions 0.8.1 and earlier.
4
What type of vulnerability is CVE-2012-4668?
CVE-2012-4668 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2012-4668 lead to data theft?
Yes, CVE-2012-4668 can potentially allow attackers to steal sensitive data through malicious scripts.