PT-2017-6849

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.0.6 Roundcube Webmail versions 1.1.x prior to 1.1.2 Description The issue allows remote authenticated users to read arbitrary files via the alt parameter when uploading a vCard. This is related to the...