Beveiligingsadvies

CVE-2013-1904

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-02-08 00:00:00

Laatst bijgewerkt 2024-08-06 15:20:37

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013.

← Alle CVE's bekijken Bekijk op cve.org ↗