Skip to content
OpenAdvisories
Unscored USN-4669-1 1 CVE

squirrelmail vulnerability

Published Dec 10, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that a cross-site scripting (XSS) vulnerability in
SquirrelMail allows remote attackers to use malicious script content from
HTML e-mail to execute code and/or provoke a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS squirrelmail 2:1.4.23~svn20120406-2+deb8u3ubuntu0.16.04.2

Vulnerabilities 1

  • Unscored —
    CVE-2019-12970

    XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTE…

    squirrelmail Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-12970