Medium 1 exploited CVE DLA-3835-1 2 CVEs

roundcube - security update

Published Jun 17, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	roundcube	1.3.17+dfsg.1-1~deb10u6

Vulnerabilities 2

Medium 6.1

CVE-2024-37383 Exploited Public exploit EPSS 74%

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

roundcube roundcube Debian Ubuntu

Jun 7, 2024
KEV Oct 24, 2024
Medium 6.1

CVE-2024-37384

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user preferences.

roundcube roundcube Debian Ubuntu

Jun 7, 2024