Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.
Sign upXSS via _mbox-parameter in Roundcube v.1.1.1 #4837
Comments
This comment has been minimized.
This comment has been minimized.
|
Comment by @alecpl on 30 May 2015 14:29 UTC Confirmed. There's no alert in Roundcube 1.0. |
This comment has been minimized.
This comment has been minimized.
|
Milestone changed by @alecpl on 30 May 2015 14:29 UTC later => 1.1.2 |
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
|
Status changed by @alecpl on 30 May 2015 15:39 UTC new => closed |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
rcubetrac commentedMay 30, 2015
Reported by sroesemann on 30 May 2015 11:30 UTC as Trac ticket #1490417
The XSS-vulnerability can be triggered by appending malicious script code to the _mbox-parameter. The following example will pop an alert box:
https://{YOURSERVER}/?_task=mail&_mbox=INBOX%22%3E%3Cscript%3Ealert(%22Roundcube+v1.1.1+XSS%22)%3C%2Fscript%3E
Attackers could use this vulnerability to steal cookies or extract email-content.
Used browsers: Mozilla Firefox v. 38.0.1, Apple Safari 8.0.6 on Mac OSX 10.10.
Keywords: XSS, Vulnerability
Migrated-From: http://trac.roundcube.net/ticket/1490417