CVE-2009-4077

MEDIUM 6.8CVE-2009-4077 · Published 25/11/2009 · updated 16/06/2026

In short

CVE-2009-4077 is a MEDIUM (CVSS 6.8) vulnerability affecting webmail (roundcube).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webmail roundcube	`= 0.1= 0.1.1= 0.2= 0.2.1≤ 0.2.2`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076.

References

More vulnerabilities in webmail

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

webmail

roundcube

= 0.1= 0.1.1= 0.2= 0.2.1≤ 0.2.2

No fix yet

More vulnerabilities in webmail

See all →