CVE-2024-42010 describes an insufficient filtering vulnerability in mod_css_styles within Roundcube versions through 1.5.7 and 1.6.x through 1.6.7, allowing remote attackers to extract sensitive information via crafted CSS in rendered emails. This vulnerability carries a CVSS score of 7.5 (High), indicating a low attack complexity and no user interaction required for a remote attacker to achieve high confidentiality impact. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| N/A | N/A | n/aCNA affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.