Security Advisory

CVE-2016-4069

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2016-08-25 18:00:00
Last updated 2024-08-06 00:17:30
Assigner debian
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service (disk consumption) via unspecified vectors.