Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Reserved in error; never associated with a vulnerability.

Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

roundcubemail: roundcubemail: Server-Side Request Forgery via address filter bypass

Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcube_utils::is_local_url() omitted the RFC 6052 NAT64 prefix 64:ff9b::/96, the RFC 8215 local-use NAT64 prefix 64:ff9b:1::/48 and the unspecified address ::/128, so URLs such as http://[64:ff9b::7f00:1]/ passed the filter and reached loopback, link-local and cloud metadata addresses. Upstream fixed this in the commit “Fix SSRF filter (is_local_url()) bypass via NAT64 64:ff9b::/96”.