NVD

Id
40914  
Name
CVE-2013-5645  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-08-29  
Modified Date
2013-09-11  
Seq
2013-5645  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206857 40914 CVE-2013-5645 openSUSE-SU-2013:1420  View
206858 40914 CVE-2013-5645 http://trac.roundcube.net/changeset/93b0a30c1c8aa29d862b587b31e52bcc344b8d16/github  View
206859 40914 CVE-2013-5645 http://trac.roundcube.net/changeset/ce5a6496fd6039962ba7424d153278e41ae8761b/github  View
206860 40914 CVE-2013-5645 http://trac.roundcube.net/ticket/1489251  View
206861 40914 CVE-2013-5645 http://trac.roundcube.net/wiki/Changelog#RELEASE0.9.3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22359 JVNDB-2013-003934 Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 Roundcube Webmail には、compose.inc および save_identity.inc に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-5645 65587 CVE-2013-5645 40914 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003934.html 2013-08-01 2013-09-02 View