Approved changes feed: RSS · Atom

cpe:2.3:a:rainloop:webmail:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRainloop (11b3c89d-af1b-5d52-b548-ab63be3d2f37)
ProductWebmail (187c4b89-067d-50dd-ba55-d14d4890152a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/rainloop/rainloop-webmail purl2cpe 2026-06-01 10:18:08.142875

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29360 vulnerable 2026-06-08 05:42:47.647304 Details available
The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message.
Published: 2022-07-28T00:00:00.000Z
Updated: 2024-08-03T06:17:54.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13389 vulnerable 2026-06-08 05:12:42.193859 Details available
RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection header, and the Content-Security-Policy header.
Published: 2020-03-20T00:00:00.000Z
Updated: 2024-08-04T23:49:24.981Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.