Описание
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.
Ссылки
EPSS
Процентиль: 16%
0.00248
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 5.4
ubuntu
10 дней назад
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.
CVSS3: 5.4
debian
10 дней назад
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP se ...
CVSS3: 5.4
github
10 дней назад
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.
EPSS
Процентиль: 16%
0.00248
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-77