🔺Severity: Medium
👽 Reporter: nullcathedral
⭐️ Reputation: 150
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2026-01-04
⏰ Disclosed: 2026-04-20 12:57:06
📝 Summary: A vulnerability was discovered in the HTML sanitizer of the Roundcube webmail application. The sanitizer did not properly handle the
<feImage> SVG filter primitive, allowing external resources to be loaded even when the "Block remote images" setting was enabled. This vulnerability could be used to track email opens and obtain the recipient's IP address without the user's consent.📂 Report JSON File: 3486747
@hackeronereports