oss-sec mailing list archives

Re: CVE-request: Roundcube XSS issues

From: Henri Salo <henri () nerv fi>
Date: Mon, 20 Aug 2012 12:30:46 +0300

On Mon, Aug 20, 2012 at 12:25:08PM +0300, Henri Salo wrote:

Can I get CVE-identifiers (2012) to issues listed below, thanks. Fixed in version: 0.8.1


Sorry fixed in 0.8.0.

XSS-vulnerability: http://trac.roundcube.net/ticket/1488519
SCM: http://trac.roundcube.net/changeset/a7d5e3e8580466639a18da35af13b97dc3765c16/github


http://secunia.com/advisories/50212/
http://www.securelist.com/en/advisories/50212

Three XSS-vulnerabilities: http://trac.roundcube.net/ticket/1488613


http://secunia.com/advisories/50279/
http://www.securelist.com/en/advisories/50279

- Henri Salo