CVE-2023-43770mediumunder attackCWE-79

CVE-2023-43770

Published · Updated

Follow this CVE+ Monitor Webmail+ Monitor roundcube

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

77Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 6.1epss 64%
from disclosure to weapon5 days
Published on NVDSep 22
1st PoC+5d
CISA KEV+143d
Action required by CISAfederal deadline: 2024-03-04

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

Roundcube webmail allows attackers to inject malicious scripts through specially crafted links in plain text emails, which can execute in users' browsers and potentially steal credentials or perform unauthorized actions.

Technical detail

Cross-site scripting (XSS) vulnerability in rcube_string_replacer.php affects Roundcube versions before 1.4.14, 1.5.4, and 1.6.3. Attackers can craft malicious links in text/plain email messages that bypass sanitization, allowing script execution in the victim's browser context when the email is viewed.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.