Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading to the triggering of the XSS by visiting the SENT session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Roundcube Webmail 安全漏洞
Vulnerability Description
Roundcube Webmail是Roundcube开源的一款基于浏览器的开源IMAP客户端，它支持地址薄管理、信息搜索、拼写检查等。 Roundcube Webmail 1.6.9版本存在安全漏洞，该漏洞源于存在跨站脚本(XSS)漏洞，允许远程经过身份验证的用户将恶意文件作为电子邮件附件上传，从而导致通过访问SENT会话触发跨站脚本(XSS)。
CVSS Information
N/A
Vulnerability Type
N/A