Rambox 0.6.9 Community Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rambox:rambox:0.6.9:*:*:*:community:*:*:*

part: a version: 0.6.9 update: *

VendorRambox (76e40c32-55b6-591d-9774-f21c0e1a4363)
ProductRambox (bb5ddc30-b599-59b3-989b-fa4a751ac4f0)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ramboxapp/community-edition purl2cpe 2026-06-01 10:15:43.423189
pkg:rpm/opensuse/rambox purl2cpe 2026-06-01 10:15:43.423191

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-17625 vulnerable 2026-06-08 05:13:10.874286 Details available
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron, such as an exec of OS commands within the onerror attribute of an IMG element.
Published: 2019-10-16T11:07:36.000Z
Updated: 2024-08-05T01:47:13.423Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.