Beveiligingsadvies

CVE-2026-48848

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-25 19:27:54
Laatst bijgewerkt 2026-05-26 13:00:52
Toegewezen door mitre
CVSS-score 7.2
Status PUBLISHED

Beschrijving

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.