oss-sec mailing list archives

Re: CVE-request: Roundcube XSS issues

From: Henri Salo <henri () nerv fi>
Date: Mon, 20 Aug 2012 13:37:50 +0300

On Mon, Aug 20, 2012 at 11:45:36AM +0200, Hanno Böck wrote:

Sure?


Sorry I failed badly once again.

From SA50279 http://trac.roundcube.net/ticket/1488613 "The vulnerability is confirmed in version 0.8.0. Other versions 
may also be affected." 
From SA50212 http://trac.roundcube.net/ticket/1488519 "The vulnerability is reported in versions prior to 0.8.0."


- Henri Salo

Current thread:

CVE-request: Roundcube XSS issues Henri Salo (Aug 20)
- Re: CVE-request: Roundcube XSS issues Henri Salo (Aug 20)
  - Re: CVE-request: Roundcube XSS issues Hanno Böck (Aug 20)
    - Re: CVE-request: Roundcube XSS issues Henri Salo (Aug 20)
- Re: CVE-request: Roundcube XSS issues Kurt Seifried (Aug 20)
  - Re: CVE-request: Roundcube XSS issues Steven M. Christey (Aug 24)
    - Re: CVE-request: Roundcube XSS issues Eygene Ryabinkin (Aug 26)
  - Re: CVE-request: Roundcube XSS issues Eygene Ryabinkin (Aug 26)