[Bug 1216895] VUL-0: CVE-2023-47272: Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or download).

https://bugzilla.suse.com/show_bug.cgi?id=1216895 https://bugzilla.suse.com/show_bug.cgi?id=1216895#c4 --- Comment #4 from Marcus Meissner <meissner@suse.com> --- openSUSE-SU-2024:0257-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1216895 CVE References: CVE-2023-47272 JIRA References: Sources used: openSUSE Backports SLE-15-SP5 (src): roundcubemail-1.6.7-bp155.2.9.1 -- You are receiving this mail because: You are on the CC list for the bug.