CVE-2024-57004: XSS

[apoleon]

Prerequisites

• I have searched for duplicate or closed issues
• I can recreate the issue with all plugins disabled

Describe the issue

CVE-2024-57004 has been assigned for a security problem in roundcube 1.6.9, apparently a XSS vulnerability. I can't find any information about it in your Git repository. Are you aware of the problem already? If yes, can you elaborate on the problem and point me to your fixing commit?

https://github.com/riya98241/CVE/blob/main/CVE-2024-57004

https://www.cve.org/CVERecord?id=CVE-2024-57004

What browser(s) are you seeing the problem on?

Firefox

What version of PHP are you using?

No response

What version of Roundcube are you using?

1.6.9

JavaScript errors

No response

PHP errors

No response

[alecpl]

Sounds like one of these PDF viewer problems Roundcube can do not much about. This is a browser issue.