Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-13389
6.1
MEDIUMCVSS v3
Published
March 20, 2020
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection header, and the Content-Security-Policy header.
GitHub