Alpine/roundcubemail: high 8.8
Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restr
Action: Upgrade roundcubemail to 1.1.9-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.9-r0 | - |
Fixed versions
| 1.1.9-r0 |
Sources
- osv: ALPINE-CVE-2017-8114#Alpine:v3.3/roundcubemail
- https://security.alpinelinux.org/vuln/CVE-2017-8114
published · modified · JSON