CVE-2020-15562

An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns (aka XML namespace) attribute of a HEAD element when an SVG element exists.

References

Affected packages

Git / github.com/roundcube/roundcubemail

Affected ranges

Type

GIT

Repo

https://github.com/roundcube/roundcubemail

Events

Introduced

Fixed

ce6ebd9c38bcae4a1fa9829aa20c30d9c96b2d77

Introduced

854aa7f35f6ed963033e2c0c4735852af7eca21b

Fixed

abddddb12c0f962ce111b02ff5ad0ab33657088b

Introduced

fdbdaec9989998b2a378619273f9fb60e6ad6879

Fixed

cdbefb54e2bebbc61e5fb081c7d1038d884743cf

Fixed

3e8832d029b035e3fcfb4c75839567a9580b4f82

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.2.11"
        },
        {
            "introduced": "1.3.0"
        },
        {
            "fixed": "1.3.14"
        },
        {
            "introduced": "1.4.0"
        },
        {
            "fixed": "1.4.7"
        }
    ]
}

Affected versions

1.*

1.3.0

1.3.1

1.3.10

1.3.11

1.3.12

1.3.13

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4.0

1.4.1

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15562.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    }
]