中危

Roundcube Webmail rcube_string_replace.php跨站脚本漏洞

2020-12-28 19:37:08 公开，2026-02-23 20:53:37 更新

关键漏洞
CISA KEV
APT漏洞
远程
无需认证
CWE Top 25 (2023)
开源组件漏洞
CWE Top 25 (2024)
公开PoC

CWEs：: CWE-79 （Cross-site Scripting）
SSVC：: 可利用状态：已被积极利用攻击自动化：否技术影响评估：部分 2025-02-05 04:21:48

风险信息

CVSS v2 向量: AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS v2 风险值: 4.3
CVSS v3 向量: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v3 风险值: 6.1
CVSS v3.1 向量: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v3.1 风险值: 6.1

详细信息

漏洞类型: 跨站脚本
漏洞描述: Roundcube Webmail是一款基于浏览器的开源IMAP客户端，它支持地址薄管理、信息搜索、拼写检查等。Roundcube Webmail 1.2.13以前版本，1.3.x-1.3.16版本以及1.4.x-1.4.10版本发现了XSS问题。攻击者可以在rcube_string_replace.php中的linkref_addindex错误处理的链接引用元素中使用JavaScript发送纯文本电子邮件。
修复建议: 升级至Roundcube的最新版本（1.4.10或更高版本），可从Rroundcube GIT存储库获得： https://github.com/roundcube/roundcubemail/commit/0bceba301aa621ecc0263eac17beee2a4cef0c6d

参考链接

https://github.com/roundcube/roundcubemail/compare/1.4.9...1.4.10
OSV · x_refsource_CONFIRM
https://github.com/roundcube/roundcubemail/releases/tag/1.3.16
OSV · x_refsource_CONFIRM
https://github.com/roundcube/roundcubemail/releases/tag/1.2.13
OSV · x_refsource_CONFIRM
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=978491
OSV · x_refsource_CONFIRM
https://www.alexbirnberg.com/roundcube-xss.html
OSV · x_refsource_MISC
https://roundcube.net/download/
OSV · x_refsource_MISC
https://github.com/roundcube/roundcubemail/releases/tag/1.4.10
OSV · x_refsource_CONFIRM
https://www.auscert.org.au/bulletins/ESB-2021.0010/
https://vigilance.fr/vulnerability/RoundCube-Cross-Site-Scripting-via-Message-Content-34214
https://nvd.nist.gov/vuln/detail/CVE-2020-35730
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HMLIZWKMTRCLU7KZLEQHELS4INXJ7X5Q/
OSV · vendor-advisory · x_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCEU4BM5WGIDJWP6Z4PCH62ZMH57QYM2/
OSV · vendor-advisory · x_refsource_FEDORA
https://osv.dev/vulnerability/BIT-roundcube-2020-35730
OSV
https://osv.dev/vulnerability/CVE-2020-35730
OSV
https://osv.dev/vulnerability/DSA-4821-1
OSV
https://osv.dev/vulnerability/DLA-2508-1
OSV
https://security-tracker.debian.org/tracker/CVE-2020-35730
OSV
https://ubuntu.com/security/CVE-2020-35730
OSV
https://github.com/roundcube/roundcubemail/commit/0bceba301aa621ecc0263eac17beee2a4cef0c6d
OSV
https://github.com/roundcube/roundcubemail/commit/a06ec1dcf9c972d302b16e1ac6aa079a4f6a1c3e
OSV
https://github.com/roundcube/roundcubemail/commit/47e4d44f62ea16f923761d57f1773a66d51afad4
OSV
https://ubuntu.com/security/notices/USN-5182-1
OSV
https://www.cve.org/CVERecord?id=CVE-2020-35730
OSV
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
OSV
https://osv.dev/vulnerability/UBUNTU-CVE-2020-35730
OSV
https://osv.dev/vulnerability/DEBIAN-CVE-2020-35730
OSV
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-35730
NVD · US Government Resource