Attacks leveraging Roundcube email server flaw underway

Organizations have been warned by the Cybersecurity and Infrastructure Security Agency regarding ongoing attacks exploiting a cross-site scripting vulnerability impacting various versions of the Roundcube email server, tracked as CVE-2023-43770, reports BleepingComputer.

agency attacks bleepingcomputer cross-site cve cve-2023-43770 cybersecurity email email security email server exploiting flaw infrastructure infrastructure security organizations reports roundcube roundcube email scripting security server threat intelligence vulnerability vulnerability management