Medium 1 exploited CVE DLA-3630-1 1 CVE

roundcube - security update

Published Oct 24, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	roundcube	1.3.17+dfsg.1-1~deb10u4

Vulnerabilities 1

Medium 6.1

CVE-2023-5631 Exploited EPSS 76%

Stored XSS vulnerability in Roundcube

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary Java…

Roundcube Roundcubemail roundcube roundcube Debian Ubuntu

Oct 18, 2023
KEV Oct 26, 2023