tocsin

Debian/roundcube: unknown

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user informati

Action: Upgrade roundcube to 0.3-1 or later.

Affected

introducedfixedlast affected
00.3-1-

Fixed versions

0.3-1

Sources

published · modified · JSON