CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-11-09
Roundcube Webmail Arbitrary File Disclosure Vulnerability (CVE-2017-16651) Security Advisory
[Affected Scope] Roundcube Webmail versions prior to 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3
[Impact] An authenticated attacker can read arbitrary files on the host's filesystem, including sensitive configuration files containing database credentials
[Mitigation] Immediately upgrade Roundcube Webmail to the patched versions (1.1.10, 1.2.7, 1.3.3, or later)