{"id":"CVE-2023-47272","details":"Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or download).","aliases":["BIT-roundcube-2023-47272"],"modified":"2026-05-19T11:56:02.688831624Z","published":"2023-11-05T00:00:00Z","related":["openSUSE-SU-2024:0257-1","openSUSE-SU-2024:13401-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47272.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://github.com/roundcube/roundcubemail/releases/tag/1.5.6"},{"type":"WEB","url":"https://github.com/roundcube/roundcubemail/releases/tag/1.6.5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47272.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GILSR762MJB3BNJOVOCMW2JXEPV46IIQ/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFRGBPET73URF6364CI547ZVWQESJLGK/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4F4DUA3Q46ZVB2RD7BFP4XMNS4RYFFQ/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47272"},{"type":"ADVISORY","url":"https://www.debian.org/security/2023/dsa-5572"},{"type":"FIX","url":"https://github.com/roundcube/roundcubemail/commit/5ec496885e18ec6af956e8c0d627856c2257ba2d"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00005.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/roundcube/roundcubemail","events":[{"introduced":"993b888afe29c383bf45c84f17090f4db96367ba"},{"fixed":"81ac3c342a4f288deb275590895b52ec3785cf8a"}]}],"versions":["1.6.4","1.6.3","1.6.2","1.6.1","1.6.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-47272.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R"}]}