CVE-2020-18670

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 4.4

Description The issue is related to a lack of protection for the web page structure, allowing a remote attacker to impact data integrity. It involves a Cross Site Scripting (XSS) issue, where an attacker can exploit the vulnerability through the database host and user in the /installer/test.php endpoint.

Recommendations For versions prior to 4.4, update to version 4.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /installer/test.php endpoint until a patch is available.