CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-11-19
Roundcube Webmail SQL Injection Vulnerability Security Advisory (CVE-2021-44026)
[Affected Scope] Roundcube versions before 1.3.17 and 1.4.x versions before 1.4.12
[Impact] Unauthenticated attackers can manipulate search parameters to extract sensitive database information or potentially achieve remote code execution (RCE)
[Mitigation] Immediately upgrade Roundcube to the latest stable releases (1.3.17, 1.4.12, or higher)