PT-2011-3164
CVE-2011-1492
·
تاريخ النشر
2011-04-08
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Roundcube Webmail versions prior to 0.5.1
Description
The issue allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain sensitive information, via a crafted request. This is due to the improper verification of requests for external Cascading Style Sheets (CSS) stylesheets in the steps/utils/modcss.inc file.
Recommendations
For versions prior to 0.5.1, update to version 0.5.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾