CVE:CVE-2015-8864
CNNVD:CNNVD-201604-553
RoundCube Webmail是一款基于浏览器的IMAP客户端（邮件客户端），它支持地址薄管理、信息搜索、拼写检查等。
RoundCube Webmail中存在跨站脚本漏洞。攻击者可借助特制的Svg图像文件利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade roundcube roundcube_webmail to a higher version than 1.1.1,1.1.2,1.1.3,and avoid the version 1.1.1,1.1.2,1.1.3; Upgrade roundcube webmail to a higher version than 1.0.8,1.1,1.1:beta,1.1:rc,1.1.4,and avoid the version (,1.0.8],1.1,1.1:beta,1.1:rc,1.1.4