Vulnerability CVE-2023-47272
Published: 2023-11-06

Description:
Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or download).

 References:
https://github.com/roundcube/roundcubemail/commit/5ec496885e18ec6af956e8c0d627856c2257ba2d
https://github.com/roundcube/roundcubemail/releases/tag/1.5.6
https://github.com/roundcube/roundcubemail/releases/tag/1.6.5
Copyright 2026, cxsecurity.com

 

Back to Top