EPSS
Percentile
71.5%
Roundcube is vulnerable to arbitrary password resets. The vulnerability existed because of an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin.
www.securityfocus.com/bid/98445
github.com/ilsani/rd/tree/master/security-advisories/web/roundcube/cve-2017-8114
roundcube.net/news/2017/04/28/security-updates-1.2.5-1.1.9-and-1.0.11
security-tracker.debian.org/tracker/CVE-2017-8114
security.gentoo.org/glsa/201707-11