Exploit / PoCcritical

Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks

Security Affairsby @securityaffairsOct 26, 2023 · 05:20 UTC (Oct 26, 2023)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2020-35730 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-35730 CVE-2022-27926 CVE-2023-5631

Tags: cve-2020-35730 cve-2022-27926 cve-2023-5631 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-35730	Cross-Site Scripting in Roundcube Webmail Plain-Text Email Link Handling	6.1	33%	KEV	Dec 28, 2020 KEV Jun 22, 2023
CVE-2022-27926	Reflected XSS in Synacor Zimbra Collaboration Suite 9.0 (launchNewWindow.jsp)	6.1	18%	KEV	Apr 21, 2022 KEV Apr 3, 2023
CVE-2023-5631	Stored XSS in Roundcube Webmail exploited in the wild (CVE-2023-5631)	5.4	76%	KEVPoC	Oct 18, 2023 KEV Oct 26, 2023

From the original article

2 min read at securityaffairs.com

Russia-linked threat actor Winter Vivern has been observed exploiting a zero-day flaw in Roundcube webmail software. Russian APT group Winter Vivern (aka TA473) has been observed exploiting a zero-day flaw in Roundcube webmail software on October 11, 2023. ESET researchers pointed out that is a different vulnerability than CVE-2020-35730 , that the group exploited in other attacks.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.