Roundcube Vulnerabilities Allow Attackers to Execute Malicious Scripts

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Roundcube Vulnerabilities Enable Malicious Script Execution Roundcube Webmail has issued critical security updates for vulnerabilities in versions 1.6 and 1.5 LTS. These flaws, including a Cross-Site Scripting (XSS) issue in SVG handling, could allow attackers to execute malicious scripts and gain unauthorized access to sensitive information. Users are advised to update their systems promptly to mitigate risks. 3 sources 35