[Bug 1216895] VUL-0: CVE-2023-47272: Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or download).

https://bugzilla.suse.com/show_bug.cgi?id=1216895 Stoyan Manolov <stoyan.manolov@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lars.vogdt@suse.com -- You are receiving this mail because: You are on the CC list for the bug.