CVE-2015-5381

概要

参考情報

• trac.roundcube.net/ticket/1490417 · Issue Tracking
• openwall.com/lists/oss-security/2015/07/07/2 · Mailing List
• roundcube/roundcubemail commit b782815 · Issue Tracking
• roundcube/roundcubemail · Issue Tracking
• roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released · Patch

roundcube webmail のその他の脆弱性

• CVE-2015-5383高 7.5Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, o…
• CVE-2015-5382中 6.5program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbit…
• CVE-2016-4068中 6.1Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrar…
• CVE-2015-8864中 6.1Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrar…
• CVE-2015-8794中 6.5Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote …