Exploitation Summary
CVE-2023-43770 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added February 12, 2024. EIP tracks 3 public exploits from researchers including s3cb0y, knight0x07, skyllpro.
AI-analyzed exploit summary This repository contains a functional Python script that exploits CVE-2023-43770, an XSS vulnerability in Roundcube Webmail. The PoC sends a crafted email with a malicious script embedded in a text/plain message, leveraging improper handling in Roundcube's string replacer.
Description
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.
Exploits (3)
This repository contains a functional Python script that exploits CVE-2023-43770, an XSS vulnerability in Roundcube Webmail. The PoC sends a crafted email with a malicious script embedded in a text/plain message, leveraging improper handling in Roundcube's string replacer.
This repository provides a technical description and references for CVE-2023-43770, a stored XSS vulnerability in Roundcube. It includes details about the attack chain, affected versions, and references to patches and external resources.
This PoC demonstrates a chained exploit combining XSS and SQLi in Roundcube Webmail to exfiltrate session data. The Python script sends a malicious email with an XSS payload that triggers a SQL injection to extract session variables.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N