Описание
Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 1.4.4+dfsg.1-1 |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | released | 1.2~beta+dfsg.1-0ubuntu1+esm2 |
| esm-apps/bionic | released | 1.3.6+dfsg.1-1ubuntu0.1~esm2 |
| esm-apps/focal | released | 1.4.3+dfsg.1-1ubuntu0.1~esm1 |
| esm-apps/jammy | not-affected | 1.4.4+dfsg.1-1 |
| esm-apps/noble | not-affected | 1.4.4+dfsg.1-1 |
| esm-apps/xenial | released | 1.2~beta+dfsg.1-0ubuntu1+esm2 |
| esm-infra-legacy/trusty | DNE |
Показывать по
Ссылки на источники
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
Roundcube Webmail before 1.4.4 allows attackers to include local files ...
Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
ALT-PU-2020-1898: package `roundcube` update to version 1.4.4-alt1
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3