Roundcube Webmail Information Disclosure Vulnerability in HTML Style Sanitizer

A vulnerability allowing information disclosure has been identified in Roundcube Webmail versions prior to 1.5.12 and 1.6 prior to 1.6.12. The issue arises in the HTML style sanitizer, where improper handling of style content could lead to unintended information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure.

Reproduction

The vulnerability can be reproduced by crafting a style block that includes 'page:' properties or SVG elements, which the sanitizer fails to process correctly. This can be done by embedding such content within a div style, effectively bypassing the intended sanitization and potentially leading to information leakage.

Remediation

Users are advised to update to Roundcube Webmail versions 1.6.12 or 1.5.12.