CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Nov 16, 2023

High

CISA KEV

CVE-2023-5631

Roundcube—Webmail

Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.

Required Action

https://roundcube.net/news/2023/10/16/security-update-1.6.4-released, https://roundcube.net/news/2023/10/16/security-updates-1.5.5-and-1.4.15 ; https://nvd.nist.gov/vuln/detail/CVE-2023-5631

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Oct 26, 2023
KEV Added: Oct 26, 2023
Due Date: Nov 16, 2023
Related Articles: 0

Vendor

Roundcube

Webmail