CVE-2023-43770
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2023-43770 is a vulnerability that affects Roundcube versions before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3. This vulnerability allows for cross-site scripting (XSS) attacks through crafted links in text/plain email messages due to the behavior of the program/lib/Roundcube/rcube_string_replacer.php file. The potential danger it poses to organizations is a medium severity level with a base score of 6.1 out of 10, as determined by NIST's CVSS scoring system. To remediate this vulnerability, organizations should update their Roundcube installations to version 1.4.14, 1.5.4, or 1.6.3 or later versions to mitigate the risk of XSS attacks exploiting this vulnerability. Note: The information provided is based on the given data and may not provide a comprehensive analysis of the vulnerability's impact or remediation steps required in specific environments or configurations
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions