Independent States (CIS) containing a hyperlink exploiting this Cross-Site Scripting (XSS) vulnerability in the Roundcube webmail system.<\/p>\n
“`HTML<\/p>\n
“`<\/p>\n
Cross-Site Scripting vulnerabilities allow an attacker to inject malicious scripts into web pages viewed by other users, making its potential for harm considerable.<\/p>\n
The exploited vulnerability resided in the Roundcube\u2019s HTML editor found in its ‘Compose’ function.<\/p>\n
It allowed the attacker to include JavaScript code within an email that would execute whenever a victim interacted with it.<\/p>\n
Practically, the victim would receive an innocent-looking email, once opened, it renders and runs the hidden JavaScript code.<\/p>\n
This specific attack allowed the hackers to clone login details of users who interacted with the infected e-mail.<\/p>\n
“`HTML<\/p>\n
“`<\/p>\n
While the vulnerability has been patched by the Roundcube team with its recent update, it appears that not all systems have been appropriately updated, leaving them open to the exploit.<\/p>\n
The delay in system updates, an all too common practice, often leaves organizations exposed to such known vulnerabilities. <\/p>\n
“`HTML<\/p>\n
“`<\/p>\n
The attack on the CIS governmental organization is a good example of how the XSS vulnerability can be used.<\/p>\n
The attacker managed to phish credentials off multiple accounts, thus undeniably highlighting the severity of such an exploit.<\/p>\n
It is strongly advised for IT administrations managing organizations’ Roundcube services to ensure their systems are updated to the latest secured versions.<\/p>\n
“`HTML<\/p>\n
“`<\/p>\n
While the susceptibility has been addressed by Roundcube, the best action is to ensure your systems are updated with the patch.<\/p>\n
It is also recommended to employ intrusion detection systems, and regularly train staff to be mindful of opening emails from unfamiliar sources even if they look benign.<\/p>\n
“`HTML<\/p>\n
“`<\/p>\n
For further information on this topic, refer to the following sources:<\/p>\n
1. Positive Technologies: Top Attacks of Q3 2021<\/a> Independent States (CIS) containing a hyperlink exploiting this Cross-Site Scripting (XSS) vulnerability in the Roundcube<\/p>\n","protected":false},"author":1,"featured_media":2736,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[2,5],"tags":[],"class_list":["post-2735","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-news","pmpro-has-access"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/2735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/comments?post=2735"}],"version-history":[{"count":1,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/2735\/revisions"}],"predecessor-version":[{"id":2742,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/2735\/revisions\/2742"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media\/2736"}],"wp:attachment":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media?parent=2735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/categories?post=2735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/tags?post=2735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n2. OWASP: Cross-Site Scripting<\/a>
\n3. DigitalOcean: How to Protect Your Server Against the Roundcube XSS Vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"