Alpine/roundcubemail: high 8.8
Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restr
Action: Upgrade roundcubemail to 1.1.9-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.9-r0 | - |
Fixed versions
| 1.1.9-r0 |
Sources
published · modified · JSON