CVE-2021-44025

—

CVSS 3.1

6.1 medium

EPSS

1%p64

Published

Nov 19, 2021 (Nov 19, 2021)

Modified

Jun 17, 2026

Description

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message.

Vendors: roundcube fedoraproject debian
Products: webmail, fedora, debian linux
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.