tocsin

Debian/roundcube: unknown

Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to

Action: Upgrade roundcube to 1.1.1+dfsg.1-2 or later.

Affected

introducedfixedlast affected
01.1.1+dfsg.1-2-

Fixed versions

1.1.1+dfsg.1-2

Sources

published · modified · JSON