{"uuid": "2f835a20-7540-4aa5-8cbc-0e46612c5fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-43770", "type": "seen", "source": "https://t.me/hacking_Attack/122042", "content": "Kali Linux Tutorials\nCVE-2023-43770 POC \u2013 Unveiling XSS Vulnerability In Roundcube\n\nIn the dynamic realm of cybersecurity, vulnerabilities emerge and evolve constantly. The recent discovery of CVE-2023-43770 highlights an alarming Cross-Site Scripting (XSS) flaw in popular webmail software, Roundcube. \n\nThis article delves deep into the vulnerability, offering a hands-on Proof-of-Concept to understand its intricacies and implications. Join us as we unveil the layers behind this significant security loophole.\n\nA Proof-Of-Concept for the recently found CVE-2023-43770 vulnerability.\n\nRoundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.\n\nUsage\npython cve-2023-43770.py -e attacker@gmail.com -p Attack3rPwd -t victim@example.com \nDemo\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCuRW0hFLDVjIBPIwbxo-vFVH68hPbNMoC2Xoh4ka65DDVV4gXeR0PC18woG8zPlJkYXxsNQfNIkmJPhunim-V6dpR3oEn-k1lLHXk0wfieQG2PCmV4HENzu7K2Uy9PbhclbyLBSKWv0WqEr62RmuFxIj1_6UlYpQvanJQxi9J41RX5UNTpBqt6i9HaPon/s16000/demo.webp", "creation_timestamp": "2026-09-02T01:01:06.490934Z"}