CVE-2020-15562

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns (aka XML namespace) attribute of a HEAD element when an SVG element exists.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.htmlBroken Link
https://github.com/roundcube/roundcubemail/commit/3e8832d029b035e3fcfb4c75839567a9580b4f82Patch, Third Party Advisory
https://github.com/roundcube/roundcubemail/releases/tag/1.2.11Release Notes, Third Party Advisory
https://github.com/roundcube/roundcubemail/releases/tag/1.3.14Release Notes, Third Party Advisory
https://github.com/roundcube/roundcubemail/releases/tag/1.4.7Release Notes, Third Party Advisory
https://www.debian.org/security/2020/dsa-4720Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.htmlBroken Link
https://github.com/roundcube/roundcubemail/commit/3e8832d029b035e3fcfb4c75839567a9580b4f82Patch, Third Party Advisory
https://github.com/roundcube/roundcubemail/releases/tag/1.2.11Release Notes, Third Party Advisory
https://github.com/roundcube/roundcubemail/releases/tag/1.3.14Release Notes, Third Party Advisory
https://github.com/roundcube/roundcubemail/releases/tag/1.4.7Release Notes, Third Party Advisory
https://www.debian.org/security/2020/dsa-4720Third Party Advisory

Timeline

Published: Jul 6, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-155636.5An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 H CVE-2020-155646.5An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check CVE-2020-155658.8An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain p CVE-2020-155666.5An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event CVE-2020-155677.8An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-CVE-2020-155689.8TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation CVE-2020-155695.5PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor.CVE-2020-15577.3A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who succ CVE-2020-155705.5The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to caus CVE-2020-155727.5Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to u CVE-2020-155736.1SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421.CVE-2020-155747.5SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893.