Lucene search

K
cve[email protected]CVE-2024-37385
HistoryJun 07, 2024 - 4:15 a.m.

CVE-2024-37385

2024-06-0704:15:30
web.nvd.nist.gov
25
roundcube webmail
windows
command injection
cve-2024-37385
cve-2020-12641
incomplete fix.

9.8 High

AI Score

Confidence

High

0.123 Low

EPSS

Percentile

95.4%

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: this issue exists because of an incomplete fix for CVE-2020-12641.