Add detection for CVE-2024-37383

[nmasdoufi-ol]

Description

Adds vulnerability detection for CVE-2024-37383, a cross-site scripting vulnerability in Roundcube Webmail that affects versions before 1.5.7 and 1.6.x before 1.6.7.

Implementation Details

• Detects vulnerable Roundcube versions by matching the rcversion field in the application's root path response
• Uses simple regex pattern to match vulnerable version ranges:
  • All versions up to 1.5.6 ([0-1]0[0-5]0[0-6])
  • Versions 1.6.0 through 1.6.6 (1060[0-6])

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.25%. Comparing base (d754aff) to head (6f93a4b).
Report is 4 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #128      +/-   ##
==========================================
+ Coverage   96.22%   96.25%   +0.03%     
==========================================
  Files         162      164       +2     
  Lines        5794     5842      +48     
==========================================
+ Hits         5575     5623      +48     
  Misses        219      219              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.