CISA Alert: CVE-2024-37383 - Webmail - Unknown Vendor Vulnerability

[ums91]

Vulnerability Details

• Name: CVE-2024-37383
• CVE ID: CVE-2024-37383
• Vendor: Unknown Vendor
• Product: Webmail
• Description: Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.
• Date Added: N/A
• Due Date: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
• Required Action: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
• CWE ID: N/A
• CWE Name: N/A
• Base Score: [N/A] https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:
• Severity: Unknown

Recommended Action

Please review the vulnerability and apply the recommended patches or mitigations.

Source: CISA KEV Catalog

[ums91]

Details not fetching correctly, trying to fix it, I'm also facing difficulties updating the Severity label 🙄