Debian/roundcube: high 8.8
Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restr
Action: Upgrade roundcube to 1.2.3+dfsg.1-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.3+dfsg.1-4 | - |
Fixed versions
| 1.2.3+dfsg.1-4 |
Sources
- osv: DEBIAN-CVE-2017-8114#Debian:13/roundcube
- https://security-tracker.debian.org/tracker/CVE-2017-8114
published · modified · JSON