Diffusion roundcubemail 4da20eb1d113

Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes
4da20eb1d113
Actions

Tags

None

Referenced Files

None

Subscribers

None

Description

Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes

Reported by Valentin T. and Lutz Wolf of CrowdStrike.

Details

Provenance

machniak	Authored on May 19 2024, 10:20 AM
mollekopf	Pushed on May 22 2024, 9:04 AM

Parents

R113:0d0bc61b139d: Fix cross-site scripting (XSS) vulnerability in handling list columns from user…

Branches

Unknown

Tags

Unknown

Build Status

Buildable 47307

Event Timeline

machniak committed R113:4da20eb1d113: Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes (authored by machniak).May 19 2024, 10:21 AM

Harbormaster completed building B47307: R113:4da20eb1d113: Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes.May 22 2024, 9:04 AM

Changes (3)

Path

Size

program/

lib/

Roundcube/

rcube_washtml.php

tests/

Framework/

R113:4da20eb1d113

CHANGELOG.md

Loading...

program/lib/Roundcube/rcube_washtml.php

Loading...

tests/Framework/Washtml.php

Loading...