Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-37383

Fixed in a distro release ExploitedEPSS 74%CVSS 6.1

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

Published 2024-06-07 · In CISA KEV since 2024-10-24 · CVE record · OSV

Products: roundcube webmail

Distro releases

ReleasePackageFixed in
Debian 10roundcube1.3.17+dfsg.1-1~deb10u6
Debian 11roundcube1.4.15+dfsg.1-1+deb11u3
Debian 12roundcube1.6.5+dfsg-1+deb12u2
Debian 13roundcube1.6.7+dfsg-1
Debian 14roundcube1.6.7+dfsg-1
Ubuntu Pro 16.04 LTSroundcube1.2~beta+dfsg.1-0ubuntu1+esm4
Ubuntu Pro 18.04 LTSroundcube1.3.6+dfsg.1-1ubuntu0.1~esm4
Ubuntu Pro 20.04 LTSroundcube1.4.3+dfsg.1-1ubuntu0.1~esm4
Ubuntu Pro 22.04 LTSroundcube1.5.0+dfsg.1-2ubuntu0.1~esm3