Lucene search
PRIOn knowledge basePRION:CVE-2020-12640HistoryMay 04, 2020 - 3:15 p.m.
Directory traversal
2020-05-0415:15:00
PRIOn knowledge base
www.prio-n.com
4
Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
References
lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html
github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12640-PHP%20Local%20File%20Inclusion-Roundcube
github.com/roundcube/roundcubemail/commit/814eadb699e8576ce3a78f21e95bf69a7c7b3794
github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4
github.com/roundcube/roundcubemail/releases/tag/1.4.4
roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10
security.gentoo.org/glsa/202007-41
Related
ubuntucve
ubuntucve
CVE-2020-12640
2020-05-04 00:00:00
osv
osv
CVE-2020-12640
2020-05-04 15:15:14
BIT-roundcube-2020-12640
2024-03-06 11:06:12
roundcube vulnerabilities
2022-08-08 06:30:29
nvd
nvd
CVE-2020-12640
2020-05-04 15:15:14
debiancve
debiancve
CVE-2020-12640
2020-05-04 15:15:14
cve
cve
CVE-2020-12640
2020-05-04 15:15:14
cvelist
cvelist
CVE-2020-12640
2020-05-04 14:58:28
nessus
nessus
GLSA-202007-41 : Roundcube: Multiple vulnerabilities
2020-07-27 00:00:00
openSUSE Security Update : roundcubemail (openSUSE-2020-1516)
2020-09-30 00:00:00
gentoo
gentoo
Roundcube: Multiple vulnerabilities
2020-07-27 00:00:00
openvas
openvas
Roundcube Webmail < 1.2.10, 1.3.x < 1.3.11, 1.4.x < 1.4.4 Multiple Vulnerabilities
2020-05-06 00:00:00
openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2020:1516-1)
2020-09-25 00:00:00
Ubuntu: Security Advisory (USN-5182-1)
2023-01-27 00:00:00
suse
suse
Security update for roundcubemail (moderate)
2020-09-24 00:00:00
ubuntu
ubuntu
Roundcube Webmail vulnerabilities
2022-08-08 00:00:00