Cybersecurity Alerts

Roundcube Webmail File Disclosure Vulnerability

Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-552

References

• https://nvd.nist.gov/vuln/detail/CVE-2017-16651