Vulnerability Name:

CVE-2020-12625 (CCN-181376)

Assigned:2020-04-26
Published:2020-04-26
Updated:2022-09-02
Summary:An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.
CVSS v3 Severity:6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
6.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
5.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-79
Vulnerability Consequences:Cross-Site Scripting
References:Source: MITRE
Type: CNA
CVE-2020-12625

Source: SUSE
Type: Third Party Advisory
openSUSE-SU-2020:1516

Source: XF
Type: UNKNOWN
roundcube-cve202012625-xss(181376)

Source: MISC
Type: Exploit, Third Party Advisory
https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12625-Cross%20Site-Scripting%20via%20Malicious%20HTML%20Attachment-Roundcube

Source: CCN
Type: Roundcube Webmail GIT Repository
Fix XSS issue in handling of CDATA in HTML messages

Source: MISC
Type: Patch, Third Party Advisory
https://github.com/roundcube/roundcubemail/commit/87e4cd0cf2c550e77586860b94e5c75d2b7686d0

Source: MISC
Type: Patch, Third Party Advisory
https://github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4

Source: MISC
Type: Third Party Advisory
https://github.com/roundcube/roundcubemail/releases/tag/1.4.4

Source: GENTOO
Type: Third Party Advisory
GLSA-202007-41

Source: DEBIAN
Type: Third Party Advisory
DSA-4674

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2020-12625

Vulnerable Configuration:Configuration 1:
  • cpe:/a:roundcube:webmail:*:*:*:*:*:*:*:* (Version < 1.4.4)

    • Configuration 2:
  • cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:opensuse:leap:15.1:*:*:*:*:*:*:*
  • OR cpe:/a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
  • OR cpe:/o:opensuse:leap:15.2:*:*:*:*:*:*:*
  • OR cpe:/a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:roundcube:webmail:1.4.3:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:202012625
    V
    		CVE-2020-12625
    2022-05-22
    oval:org.opensuse.security:def:64835
    P
    		Security update for systemd (Moderate)
    2022-01-11
    oval:org.opensuse.security:def:64625
    P
    		Security update for xen (Moderate)
    2021-12-03
    oval:org.opensuse.security:def:64626
    P
    		Security update for aaa_base (Moderate)
    2021-12-03
    oval:org.opensuse.security:def:64893
    P
    		Security update for containerd, docker, runc (Important)
    2021-10-25
    oval:org.opensuse.security:def:63484
    P
    		libgstaudio-1_0-0-32bit-1.16.2-2.12 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63346
    P
    		librelp-devel-1.2.15-1.15 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:64733
    P
    		Security update for the Linux Kernel (Important)
    2021-07-20
    oval:org.opensuse.security:def:64533
    P
    		Security update for salt (Critical)
    2021-06-21
    oval:org.opensuse.security:def:62865
    P
    		ocaml-libguestfs-devel-1.38.0-3.52 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:64489
    P
    		Security update for p7zip (Moderate)
    2021-05-04
    oval:org.opensuse.security:def:63078
    P
    		reiserfs-kmp-default-4.12.14-195.1 on GA media (Moderate)
    2021-04-29
    oval:org.opensuse.security:def:64277
    P
    		Security update for gcc7 (Moderate)
    2020-12-10
    oval:org.opensuse.security:def:63110
    P
    		rmt-server-pubcloud-1.2.2-1.15 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63581
    P
    		imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62665
    P
    		libdjvulibre-devel-3.5.27-9.28 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62664
    P
    		libcolord-gtk-devel-0.1.26-1.48 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63085
    P
    		ntp-4.2.8p13-4.6.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63288
    P
    		nginx-1.16.1-1.21 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62688
    P
    		libopenjpeg1-1.5.2-2.28 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63144
    P
    		bind-9.11.2-10.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63082
    P
    		libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:74947
    P
    		Security update for tigervnc (Important)
    2020-12-01
    oval:org.opensuse.security:def:64379
    P
    		librsync-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64037
    P
    		Security update for git (Important)
    2020-12-01
    oval:org.opensuse.security:def:63931
    P
    		Security update for mailman (Important)
    2020-12-01
    oval:org.opensuse.security:def:74599
    P
    		Security update for roundcubemail (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:65005
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:63710
    P
    		Security update for openssh (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:75080
    P
    		Security update for roundcubemail (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64421
    P
    		openslp on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64171
    P
    		Security update for u-boot (Important)
    2020-12-01
    oval:org.opensuse.security:def:63784
    P
    		Security update for nmap (Important)
    2020-12-01
    oval:org.opensuse.security:def:74473
    P
    		Security update for phpMyAdmin (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64160
    P
    		Security update for bcm43xx-firmware (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:100237
    P
    		 (Moderate)
    2020-10-28
    oval:org.opensuse.security:def:96367
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:110775
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:109714
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:103057
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:93524
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    oval:org.opensuse.security:def:110223
    P
    		Security update for roundcubemail (Moderate)
    2020-09-24
    BACK
    roundcube webmail *
    debian debian linux 9.0
    debian debian linux 10.0
    opensuse leap 15.1
    opensuse backports sle 15.0 sp1
    opensuse leap 15.2
    opensuse backports sle 15.0 sp2
    roundcube webmail 1.4.3