Bug 909289 (CVE-2012-6121)
Summary: | CVE-2012-6121 roundcubemail: Cross-site scripting (XSS) in vbscript: and data:text URL handling | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Jan Lieskovsky <jlieskov> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED ERRATA | QA Contact: | |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | unspecified | CC: | christoph.wickert, gwync, mhlavink, tmraz |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | roundcubemail-0.8.5 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2013-03-26 15:41:22 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 909304, 909306 | ||
Bug Blocks: |
Description
Jan Lieskovsky
2013-02-08 14:55:29 UTC
This issue affects the versions of the roundcubemail, as shipped with Fedora release of 16, 17, and 18. Please schedule an update. -- This issue affects the version of the roundcubemail, as shipped with Fedora EPEL 6. Please schedule an update. This issue did NOT affect the version of the roundcubemail package, as shipped with Fedora EPEL 5. Created roundcubemail tracking bugs for this issue Affects: fedora-all [bug 909304] Affects: epel-6 [bug 909306] |