Known vulnerabilities in roundcube (Debian package) 0.1~rc1~dfsg-2

Vendor: Debian
Version: 0.1~rc1~dfsg-2
Software CPE: cpe:2.3:o:debian:roundcube_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting roundcube (Debian package) version 0.1~rc1~dfsg-2 roundcube (Debian package) 0.1~rc1~dfsg-2 is affected by 2 vulnerabilities: 2 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27500 - Cross-Site Request Forgery (CSRF)
CVE-2020-12626
CWE-352 Low
No
No
1.2.3+dfsg.1-4+deb9u4, 1.3.11+dfsg.1-1~deb10u1, 1.4.4+dfsg.1-1, 1.4.4+dfsg.1-1~bpo10+1 04.05.2020 SB2020050420
SB2020050615
SB2020072722
#VU27498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12625
CWE-79 Low
No
No
1.2.3+dfsg.1-4+deb9u4, 1.3.11+dfsg.1-1~deb10u1, 1.4.4+dfsg.1-1, 1.4.4+dfsg.1-1~bpo10+1 04.05.2020 SB2020050420
SB2020050615
SB2020072722
and 1 more