Multiple security vulnerabilities in Roundcube Webmail

Multiple security vulnerabilities in Roundcube Webmail
Multiple security vulnerabilities in Roundcube Webmail

Release date:
Updated on:

Affected Systems:

RoundCube Webmail

Description:

Bugtraq id: 75555

RoundCube Webmail is a browser-based IMAP client.

Roundcube Webmail has cross-site scripting, information leakage, and Arbitrary File Read vulnerabilities. Attackers can exploit these vulnerabilities to steal cookie authentication creden, and execute arbitrary script code in the browser, attackers can execute arbitrary files or leak sensitive information.

<* Source: Andreas Stieger
*>

Suggestion:

Vendor patch:

RoundCube
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://roundcube.net/

This article permanently updates the link address: