Skip to content
OpenAdvisories
Critical 1 exploited CVE DSA-5743-2 3 CVEs

roundcube - security update

Published Aug 13, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 roundcube 1.4.15+dfsg.1-1+deb11u4

Vulnerabilities 3

  • Critical 9.3
    CVE-2024-42009 Exploited Public exploit Scanner template EPSS 83%

    A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to ste…

    roundcube roundcube Debian Ubuntu
    KEV Jun 9, 2025
  • Critical 9.3
    CVE-2024-42008 Public exploit EPSS 34%

    A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.…

    roundcube roundcube Debian Ubuntu
  • High 7.5
    CVE-2024-42010 EPSS 67%

    mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) t…

    roundcube roundcube Debian Ubuntu