- Vendor / Project
- Roundcube
- Product
- Roundcube Webmail
- Date added
- Jun 22, 2023
- Due date
- Jul 13, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-89
Description
Roundcube Webmail is vulnerable to SQL injection via search or search_params.
Required action
Apply updates per vendor instructions.