writeups.xyz / Government Emails at Risk: Critical Cross-Site Scripting Vulnerability in Roundcube Webmail

Submitter : c2a

Date: 5 August 2024

Bounty : undisclosed

Vulnerabilities :

• XSS
• Security Code Review

Programs :

• Roundcube

Authors :

• Oskar Zeino-Mahmalat

Link :
https://www.sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/