Описание
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data.
Ссылки
- Patch
- Patch
- Patch
- Release Notes
- Release Notes
- Release Notes
- Third Party Advisory
- Issue TrackingMailing List
Уязвимые конфигурации
Одно из
EPSS
3.7 Low
CVSS3
7.5 High
CVSS3
Дефекты
Связанные уязвимости
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data.
An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. ...
Roundcube Webmail: Unsafe deserialization in the redis/memcache session handler
Уязвимость почтового клиента RoundCube Webmail, связанная с недостатками механизма десериализации, позволяющая нарушителю записать произвольные файлы
EPSS
3.7 Low
CVSS3
7.5 High
CVSS3