[Bug 1228900] VUL-0: CVE-2024-42009: A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_bo ...

https://bugzilla.suse.com/show_bug.cgi?id=1228900 https://bugzilla.suse.com/show_bug.cgi?id=1228900#c1 --- Comment #1 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1228900) was mentioned in https://build.opensuse.org/request/show/1191896 Factory / roundcubemail -- You are receiving this mail because: You are on the CC list for the bug.