Roundcube Webmail XSS Vulnerability Exposes Sensitive Data

RoundCube Webmail is a browser-based, multilingual IMAP client. Its extensive feature set includes MIME support, address books, folder manipulation, message searching, spell checking, and more. A cross-site scripting (XSS) vulnerability tracked as CVE-2023-43770 in Roundcube has been found, which might result in information leakage through malicious link references in plain/text communications. Roundcube Webmail 1.6.3 is […]

The post Roundcube Webmail XSS Vulnerability Exposes Sensitive Data appeared first on Cyber Security News.

address books browser client communications cross-site cve cyber security data feature folder found imap information information leakage link malicious malicious link manipulation message mime result roundcube roundcube webmail scripting sensitive sensitive data support text vulnerabilities vulnerability webmail xss