北京赛克艾威科技有限公司 2024-06-26
Roundcube Webmail contains a cross\\-site scripting \\(XSS\\) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12
https://www.cisa.gov/known-exploited-vulnerabilities-catalog