Medium 1 exploited CVE DSA-5531-1 1 CVE

roundcube - security update

Published Oct 23, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 11	roundcube	1.4.15+dfsg.1-1~deb11u1
Debian · 12	roundcube	1.6.4+dfsg-1~deb12u1

Vulnerabilities 1

Medium 6.1

CVE-2023-5631 Exploited EPSS 76%

Stored XSS vulnerability in Roundcube

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary Java…

Roundcube Roundcubemail roundcube roundcube Debian Ubuntu

Oct 18, 2023
KEV Oct 26, 2023