Linuxsecurity

Fedora 42 and 43 Roundcube Webmail XSS Vulnerabilities Addressed

First seen 25 Dec 2025, 08:08 UTC • Linuxsecurity

•98% similarity •18.3

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Fedora 42 and 43 have reported vulnerabilities in RoundCube Webmail, specifically related to cross-site scripting (XSS) and information disclosure. Users of RoundCube, a browser-based multilingual IMAP client, are affected by these security issues, which have been addressed in updates. The updates include support for IPv6 in the database DSN.

ThreatCluster AI How this analysis works

Attack Flow

13 entities, 24 inferred relationships (STIX 2.1).

Technique (1)

Data Breach

Organization (1)

Fedora

Vulnerability (4)

CVE-2025-68460
CVE-2025-68461
XSS
Cross-Site-Scripting

Affected Platform (7)

CSS 2
MySQL
PHP
PostgreSQL
Roundcube Webmail
SQLite
Xhtml

Relationships

CVE-2025-68460 targets CSS 2
CVE-2025-68460 targets MySQL
CVE-2025-68460 targets PHP
CVE-2025-68460 targets PostgreSQL
CVE-2025-68461 targets CSS 2
CVE-2025-68461 targets MySQL
CVE-2025-68461 targets PHP
CVE-2025-68461 targets PostgreSQL
XSS targets CSS 2
XSS targets MySQL
XSS targets PHP
XSS targets PostgreSQL
Cross-Site-Scripting targets CSS 2
Cross-Site-Scripting targets MySQL
Cross-Site-Scripting targets PHP
Cross-Site-Scripting targets PostgreSQL
Data Breach targets CSS 2
Data Breach targets MySQL
Data Breach targets PHP
Data Breach targets PostgreSQL
CVE-2025-68460 related to Fedora
CVE-2025-68460 related to Roundcube Webmail
CVE-2025-68460 related to SQLite
CVE-2025-68460 related to Xhtml

Community

Browse all →

Tracked Entities in This Story

Fedora CSS 2 MySQL PHP PostgreSQL Roundcube Webmail SQLite

Fedora 42 and 43 Roundcube Webmail XSS Vulnerabilities Addressed

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story