Multiple vulnerabilities have been discovered in Roundcube Webmail affecting versions 1.7.x prior to 1.7.5 and versions prior to 1.6.20. These vulnerabilities allow attackers to bypass security policies, execute arbitrary code remotely, perform server-side request forgery (SSRF), inject code indirectly remotely (XSS), and perform cross-site request forgery (CSRF) attacks.
| Vendor | Product | Versions |
|---|---|---|
| roundcube | roundcube webmail | < 1.6.20, 1.7.0 - 1.7.4 |
Loading…
