Lucene search

K

Roundcube Security Vulnerabilities

cve
cve

CVE-2023-43770

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php...

6.1CVSS

5.8AI Score

0.113EPSS

2023-09-22 06:15 AM
54
In Wild
cve
cve

CVE-2017-17688

The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an...

5.9CVSS

5.7AI Score

0.008EPSS

2018-05-16 07:29 PM
43
cve
cve

CVE-2023-47272

Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or...

6.1CVSS

5.7AI Score

0.001EPSS

2023-11-06 12:15 AM
38
cve
cve

CVE-2023-5631

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaScript...

6.1CVSS

5.3AI Score

0.007EPSS

2023-10-18 03:15 PM
251
In Wild
cve
cve

CVE-2021-26925

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email...

5.4CVSS

5AI Score

0.001EPSS

2021-02-09 09:15 AM
33
2
cve
cve

CVE-2020-16145

Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and...

6.1CVSS

5.7AI Score

0.001EPSS

2020-08-12 01:15 PM
125
cve
cve

CVE-2019-15237

Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph...

7.4CVSS

7.2AI Score

0.001EPSS

2019-08-20 01:15 AM
115
cve
cve

CVE-2018-9846

In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the unsanitized, user-controlled "_uid" parameter (in an archive.php _task=mail&_mbox=INBOX&_action=plugin.move2archive request) to perform an MX (IMAP) injection attack by placing...

8.8CVSS

8.7AI Score

0.408EPSS

2018-04-07 09:29 PM
67
cve
cve

CVE-2020-35730

An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in...

6.1CVSS

6.1AI Score

0.005EPSS

2020-12-28 08:15 PM
443
In Wild
cve
cve

CVE-2020-13964

An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include/rcmail_output_html.php allows XSS via the username template...

6.1CVSS

7.1AI Score

0.056EPSS

2020-06-09 03:15 AM
48
cve
cve

CVE-2021-44026

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or...

9.8CVSS

9.6AI Score

0.004EPSS

2021-11-19 04:15 AM
431
In Wild
4
cve
cve

CVE-2021-44025

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning...

6.1CVSS

7.2AI Score

0.001EPSS

2021-11-19 04:15 AM
62
3
cve
cve

CVE-2020-13965

An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a...

6.1CVSS

7AI Score

0.003EPSS

2020-06-09 03:15 AM
57
cve
cve

CVE-2019-10740

In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the...

4.3CVSS

5.3AI Score

0.003EPSS

2019-04-07 03:29 PM
123
2
cve
cve

CVE-2020-15562

An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns (aka XML namespace) attribute of a HEAD element when an SVG element...

6.1CVSS

5.7AI Score

0.006EPSS

2020-07-06 12:15 PM
144
cve
cve

CVE-2009-4077

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than...

6.9AI Score

0.001EPSS

2022-10-03 04:24 PM
17
cve
cve

CVE-2009-4076

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than...

6.5AI Score

0.001EPSS

2022-10-03 04:24 PM
23
cve
cve

CVE-2018-19205

Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with...

7.5CVSS

5.7AI Score

0.008EPSS

2022-10-03 04:21 PM
35
cve
cve

CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the _alt parameter, related to contact photo...

6.5CVSS

6.1AI Score

0.002EPSS

2022-10-03 04:16 PM
27
cve
cve

CVE-2015-8793

Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter in a mail task to the default URL, a different vulnerability than...

6.1CVSS

5.9AI Score

0.004EPSS

2022-10-03 04:15 PM
21
cve
cve

CVE-2012-4668

Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an...

5.8AI Score

0.003EPSS

2022-10-03 04:15 PM
20
cve
cve

CVE-2012-1253

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image...

5.5AI Score

0.003EPSS

2022-10-03 04:15 PM
20
cve
cve

CVE-2013-5646

Cross-site scripting (XSS) vulnerability in Roundcube webmail 1.0-git allows remote authenticated users to inject arbitrary web script or HTML via the Name field of an addressbook...

5.4AI Score

0.001EPSS

2022-10-03 04:14 PM
17
cve
cve

CVE-2021-46144

Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token...

6.1CVSS

5.7AI Score

0.003EPSS

2022-01-06 05:15 AM
60
cve
cve

CVE-2020-18671

Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in...

5.4CVSS

5.5AI Score

0.001EPSS

2021-06-24 07:15 PM
135
4
cve
cve

CVE-2020-18670

Cross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in...

5.4CVSS

5.6AI Score

0.001EPSS

2021-06-24 07:15 PM
136
2
cve
cve

CVE-2020-12640

Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to...

9.8CVSS

9.1AI Score

0.012EPSS

2020-05-04 03:15 PM
152
4
cve
cve

CVE-2020-12641

rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or...

9.8CVSS

9.5AI Score

0.123EPSS

2020-05-04 03:15 PM
414
In Wild
cve
cve

CVE-2020-12625

An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML...

6.1CVSS

5.8AI Score

0.005EPSS

2020-05-04 02:15 AM
155
4
cve
cve

CVE-2020-12626

An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not...

6.5CVSS

6.3AI Score

0.031EPSS

2020-05-04 02:15 AM
76
2
cve
cve

CVE-2018-19206

steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of , as demonstrated by an onload attribute in a BODY element, within an HTML...

6.1CVSS

5.7AI Score

0.617EPSS

2018-11-12 05:29 PM
65
cve
cve

CVE-2018-1000071

roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network...

7.5CVSS

7.4AI Score

0.006EPSS

2018-03-13 03:29 PM
27
cve
cve

CVE-2017-16651

Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid.....

7.8CVSS

7.2AI Score

0.015EPSS

2017-11-09 02:29 PM
924
In Wild
cve
cve

CVE-2015-5381

Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default...

6.1CVSS

6.1AI Score

0.002EPSS

2017-05-23 04:29 AM
24
cve
cve

CVE-2015-5382

program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the _alt parameter when uploading a...

6.5CVSS

6.5AI Score

0.001EPSS

2017-05-23 04:29 AM
19
cve
cve

CVE-2015-5383

Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs...

7.5CVSS

7.1AI Score

0.004EPSS

2017-05-23 04:29 AM
523
cve
cve

CVE-2017-8114

Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password...

8.8CVSS

8.5AI Score

0.003EPSS

2017-04-29 07:59 PM
69
cve
cve

CVE-2015-8864

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than...

6.1CVSS

5.9AI Score

0.002EPSS

2017-04-13 02:59 PM
23
cve
cve

CVE-2016-4068

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than...

6.1CVSS

5.9AI Score

0.002EPSS

2017-04-13 02:59 PM
25
4
cve
cve

CVE-2017-6820

rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets (CSS) token sequence within an SVG...

6.1CVSS

5.7AI Score

0.002EPSS

2017-03-12 05:59 AM
25
cve
cve

CVE-2015-2181

Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2)...

8.8CVSS

8.9AI Score

0.003EPSS

2017-01-30 10:59 PM
32
cve
cve

CVE-2015-2180

The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the...

8.8CVSS

8.9AI Score

0.003EPSS

2017-01-30 10:59 PM
36
cve
cve

CVE-2016-4552

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail...

6.1CVSS

6AI Score

0.003EPSS

2016-12-20 10:59 PM
21
cve
cve

CVE-2016-9920

steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute...

7.5CVSS

7.5AI Score

0.007EPSS

2016-12-08 06:59 PM
37
cve
cve

CVE-2016-4069

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service (disk consumption) via unspecified...

8.8CVSS

8.5AI Score

0.112EPSS

2016-08-25 06:59 PM
24
cve
cve

CVE-2015-8770

Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. (dot dot) in the...

7.5CVSS

7.5AI Score

0.119EPSS

2016-01-29 07:59 PM
42
cve
cve

CVE-2015-8105

Cross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file...

6.3AI Score

0.002EPSS

2015-11-10 05:59 PM
26
cve
cve

CVE-2015-1433

program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the style attribute in an...

7.8AI Score

0.005EPSS

2015-02-03 04:59 PM
33
cve
cve

CVE-2014-9587

Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to (1) address book operations or the (2) ACL or (3) Managesieve...

9AI Score

0.002EPSS

2015-01-15 03:59 PM
31
cve
cve

CVE-2013-1904

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as...

6.5AI Score

0.005EPSS

2014-02-08 12:55 AM
37
Total number of security vulnerabilities65