Roundcube Webmail: SVG feImage bypasses image blocking to track email opens

[nullcathedral]

Article URL: Roundcube Webmail <1.5.13 / <1.6.13 allows attackers to force remote image loads via SVG feImage

Comments URL: Roundcube Webmail: SVG feImage bypasses image blocking to track email opens | Hacker News

Points: 147

# Comments: 53

Continue reading...