CyberRota Analysis
AI-GeneratedRoundcube Webmail versions prior to 1.6.18 and 1.7.x before 1.7.3 are vulnerable due to inadequate validation of responses from the CSS proxy, potentially allowing attackers to exploit MIME sniffing for information disclosure or cross-site scripting (XSS). Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized data exposure and web application attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or XSS (cross-site scripting) via MIME sniffing.
Related CVEs
Other vulnerabilities affecting the same vendor(s)