Skip to content

CVE-2020-18670

CVE-2020-18670

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php.

CVSS 5.4 · Medium · EPSS 0.9% · Fix available

Published: 2021-06-24T18:07:54.000Z
Updated: 2024-08-04T14:00:49.339Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
roundcube Debian:12
Affected ranges
- ECOSYSTEM: < 1.4.5+dfsg.1-1
Update to 1.4.5+dfsg.1-1
roundcube Debian:13
Affected ranges
- ECOSYSTEM: < 1.4.5+dfsg.1-1
Update to 1.4.5+dfsg.1-1
roundcube Debian:14
Affected ranges
- ECOSYSTEM: < 1.4.5+dfsg.1-1
Update to 1.4.5+dfsg.1-1

Original sources

Check your server →