Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-14952

Fixed in a distro release EPSS 1%

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack.

Published 2018-08-05 · CVE record · OSV

Products: squirrelmail

Distro releases

ReleasePackageFixed in
Debian 8squirrelmail2:1.4.23~svn20120406-2+deb8u3
Ubuntu 14.04 LTSsquirrelmail2:1.4.23~svn20120406-2+deb8u3build0.14.04.1
Ubuntu 16.04 LTSsquirrelmail2:1.4.23~svn20120406-2+deb8u3ubuntu0.16.04.1