Medium 1 exploited CVE DSA-5714-1 2 CVEs

roundcube - security update

Published Jun 18, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 11	roundcube	1.4.15+dfsg.1-1+deb11u3
Debian · 12	roundcube	1.6.5+dfsg-1+deb12u2

Vulnerabilities 2

Medium 6.1

CVE-2024-37383 Exploited Public exploit EPSS 74%

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

roundcube roundcube Debian Ubuntu

Jun 7, 2024
KEV Oct 24, 2024
Medium 6.1

CVE-2024-37384

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user preferences.

roundcube roundcube Debian Ubuntu

Jun 7, 2024