Roundcube Webmail Project Roundcube Webmail server request forgery vulnerability

The Roundcube Webmail project contains a server-side request forgery vulnerability in versions prior to 1.6.14 and 1.7.0. This vulnerability stems from an omission in the network blacklist used by rcubeutils::islocalurl, which fails to include the NAT64 prefixes 64:ff9b::/96, 64:ff9b:1::/48, and...