Lucene search

K
cvelistMitreCVELIST:CVE-2024-37385
HistoryJan 01, 1976 - 12:00 a.m.

CVE-2024-37385

1976-01-0100:00:00
mitre
www.cve.org
2

0.123 Low

EPSS

Percentile

95.4%

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: this issue exists because of an incomplete fix for CVE-2020-12641.