Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-14955

Fixed in a distro release EPSS 1%

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).

Published 2018-08-05 · CVE record · OSV

Products: squirrelmail

Distro releases

ReleasePackageFixed in
Debian 8squirrelmail2:1.4.23~svn20120406-2+deb8u3
Ubuntu 14.04 LTSsquirrelmail2:1.4.23~svn20120406-2+deb8u3build0.14.04.1
Ubuntu 16.04 LTSsquirrelmail2:1.4.23~svn20120406-2+deb8u3ubuntu0.16.04.1