Oval Definition:oval:com.ubuntu.artful:def:20158105000
Revision Date:2015-11-10Version:1
Title:CVE-2015-8105 on Ubuntu 17.10 (artful) - medium.
Description:Cross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-8105
Platform(s):Ubuntu 17.10
Product(s):
Definition Synopsis
  • Ubuntu 17.10 (artful) is installed.
  • AND NOT While related to the CVE in some way, the 'roundcube' package in artful is not affected (note: '1.1.3+dfsg.1-1').
    • BACK