Lucene search
Ubuntu.comUB:CVE-2015-5382HistoryMay 23, 2017 - 12:00 a.m.
CVE-2015-5382
2017-05-2300:00:00
ubuntu.com
ubuntu.com
10
0.001 Low
EPSS
Percentile
50.8%
program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and
1.1.x before 1.1.2 allows remote authenticated users to read arbitrary
files via the _alt parameter when uploading a vCard.
Bugs
Notes
| Author | Note |
|---|---|
| msalvatore | It may not be safe to backport upstream’s patch for trusty as it may break functionality. |
Related
cve
cve
CVE-2015-5382
2017-05-23 04:29:00
prion
prion
Code injection
2017-05-23 04:29:00
cvelist
cvelist
CVE-2015-5382
2017-05-23 03:56:00
debiancve
debiancve
CVE-2015-5382
2017-05-23 04:29:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0400)
2015-10-15 00:00:00
Roundcube Webmail < 1.0.6, 1.1.x < 1.1.2 Multiple Vulnerabilities
2017-05-30 00:00:00
Fedora Update for roundcubemail FEDORA-2015-11405
2015-07-30 00:00:00
nessus
nessus
Fedora 21 : roundcubemail-1.1.2-1.fc21 (2015-11469)
2015-07-29 00:00:00
Fedora 22 : roundcubemail-1.1.2-1.fc22 (2015-11405)
2015-07-29 00:00:00
mageia
mageia
Updated roundcubemail package fixes security vulnerabilities
2015-10-14 23:28:21
fedora
fedora
[SECURITY] Fedora 22 Update: roundcubemail-1.1.2-1.fc22
2015-07-29 01:46:24
[SECURITY] Fedora 21 Update: roundcubemail-1.1.2-1.fc21
2015-07-29 01:55:22