REDHAT-BUG-500356: XSS
From Squirrelmail vulnerability report:
An issue was fixed that allowed phishing and cross-site scripting (XSS) attacks to be run by surreptitious placement of content in specially-crafted emails sent to SquirrelMail users.
Credits: Luc Beurton
Patch: http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13667
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-500356?
The severity of REDHAT-BUG-500356 is considered high due to its potential for creating phishing and XSS attacks.
How do I fix REDHAT-BUG-500356?
To fix REDHAT-BUG-500356, update SquirrelMail to the latest version provided in the security patch for this vulnerability.
What are the risks associated with REDHAT-BUG-500356?
The risks associated with REDHAT-BUG-500356 include unauthorized access to user accounts through phishing techniques and exploitation of XSS vulnerabilities.
Who reported the REDHAT-BUG-500356 vulnerability?
The REDHAT-BUG-500356 vulnerability was reported by Luc Beurton.
Which versions of SquirrelMail are affected by REDHAT-BUG-500356?
SquirrelMail versions prior to the update that addresses REDHAT-BUG-500356 are affected.